Description
** DISPUTED ** The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7.1.2 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted use of "declare(ticks=" in a PHP script. NOTE: the vendor disputes the classification of this as a vulnerability, stating "Please do not request CVEs for ordinary bugs. CVEs are relevant for security issues only."
Remediation
References
Related Vulnerabilities
WordPress Plugin WPFront Scroll Top Cross-Site Scripting (2.0.6.07225)
PHP Other Vulnerability (CVE-2002-0986)
Undertow Insertion of Sensitive Information into Log File Vulnerability (CVE-2019-10212)
Microsoft SQL Server CVE-2023-36730 Vulnerability (CVE-2023-36730)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1423)