Description
The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures.
Remediation
References
Related Vulnerabilities
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4961)
Apache Tomcat Insufficiently Protected Credentials Vulnerability (CVE-2019-12418)
Ruby Improper Authentication Vulnerability (CVE-2007-5770)
WordPress Plugin tcS3 Cross-Site Scripting (2.1.1)
Elgg URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-11016)