CVE-2006-3017

Description

zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations.

9.3

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 4.37% Top 15%

Vendor Advisory turbolinux.com Vendor Advisory debian.org Vendor Advisory novell.com Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory mandriva.com Vendor Advisory redhat.com Vendor Advisory sgi.com Vendor Advisory ubuntu.com Vendor Advisory novell.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com

Affected: n/a n/a

References

Link	Tags
http://secunia.com/advisories/21723	third party advisory vendor advisory
https://issues.rpath.com/browse/RPL-683
http://secunia.com/advisories/21252	third party advisory vendor advisory
http://secunia.com/advisories/21202	third party advisory vendor advisory
http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&view=log
http://www.turbolinux.com/security/2006/TLSA-2006-38.txt	vendor advisory
http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&r1=1.87.4.8.2.1&r2=1.87.4.8.2.2
http://www.debian.org/security/2006/dsa-1206	vendor advisory
http://secunia.com/advisories/21050	third party advisory vendor advisory
http://www.novell.com/linux/security/advisories/2006_31_php.html	vendor advisory
http://www.securityfocus.com/archive/1/442437/100/0/threaded	mailing list
http://www.osvdb.org/26466	vdb entry
http://secunia.com/advisories/22713	third party advisory vendor advisory
http://www.redhat.com/support/errata/RHSA-2006-0568.html	vendor advisory
http://secunia.com/advisories/21135	third party advisory vendor advisory
http://www.php.net/release_5_1_3.php
http://www.securityfocus.com/archive/1/447866/100/0/threaded	mailing list
http://securitytracker.com/id?1016649	vdb entry
http://rhn.redhat.com/errata/RHSA-2006-0549.html	vendor advisory
http://secunia.com/advisories/22225	third party advisory vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:122	vendor advisory
http://secunia.com/advisories/21125	third party advisory vendor advisory
http://secunia.com/advisories/19927	third party advisory vendor advisory
http://www.osvdb.org/25255	vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/27396	vdb entry
http://securitytracker.com/id?1016306	vdb entry
http://secunia.com/advisories/21031	third party advisory vendor advisory
http://www.redhat.com/support/errata/RHSA-2006-0567.html	vendor advisory
ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10118	signature vdb entry
http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html
http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm
https://usn.ubuntu.com/320-1/	vendor advisory
http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0166.html	mailing list
http://www.novell.com/linux/security/advisories/2006_34_php4.html	vendor advisory
http://www.securityfocus.com/bid/17843	vdb entry

Frequently Asked Questions

What is the severity of CVE-2006-3017?: CVE-2006-3017 has been scored as a critical severity vulnerability.
How to fix CVE-2006-3017?: To fix CVE-2006-3017, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2006-3017 being actively exploited in the wild?: It is possible that CVE-2006-3017 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~4% probability that this vulnerability will be exploited by malicious actors in the next 30 days.