Every CVE Search/ Get API key

CVE-2017-12932

ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to...

9.8 CriticalFix available

ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

7.42%Up 5.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP.

Record
CVE-2017-12932
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-416
Updated
2026-11-02
CVE List No score

ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP.

Record
CVE-2017-12932
Updated
2026-11-02
EUVDEUVD-2017-4456 No score

ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP.

Record
EUVD-2017-4456
Updated
2026-11-03
GitHub AdvisoriesGHSA-3w3q-r4qc-93xr 9.8

ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to...

ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP.

Record
GHSA-3w3q-r4qc-93xr
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSV 9.8

ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP.

Record
CVE-2017-12932
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:1296 8.1

Red Hat Security Advisory: rh-php70-php security, bug fix, and enhancement update

Record
RHSA-2018:1296
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:2519 8.1

Red Hat Security Advisory: rh-php71-php security, bug fix, and enhancement update

Record
RHSA-2019:2519
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2017-12932 9.8

ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP.

Record
UBUNTU-CVE-2017-12932
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVSUSE-SU-2017:2468-1 No score

Security update for php7

This update for php7 fixes several issues.

These security issues were fixed:

  • CVE-2017-12932: Prevent heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue could have had an unspecified impact on the integrity of PHP (bsc#1054432).
  • CVE-2017-12934: Prevent heap use after free while unserializing untrusted data, related to the zval_get_type function in Zend/zend_types.h. Exploitation of this issue could have had an unspecified impact on the integrity of PHP (bsc#1054408).
  • CVE-2017-12933: The finish_nested_data function in ext/standard/var_unserializer.re was prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue could have had an unspecified impact on the integrity of PHP (bsc#1054430)

These non-security issues were fixed:

  • bsc#1057104: php7-devel now requires php7-pear
  • bsc#1057845: Fixed namespace encapsulation of imported classes/functions/constants
Record
SUSE-SU-2017:2468-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php7.0
Debian:9
 before 7.0.27-0+deb9u1, plus listed versions
7.0.19-17.0.20-17.0.20-27.0.22-17.0.22-27.0.22-37.0.25-17.0.26-1
7.0.27-0+deb9u1
rh-php70-php
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-bcmath
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-cli
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-common
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-dba
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-dbg
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-debuginfo
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-devel
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-embedded
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
Show 87 moreShow less
Affected packages
PackageAffectedFixed
rh-php70-php-enchant
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-fpm
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-gd
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-gmp
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-imap
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-intl
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-json
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-ldap
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-mbstring
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-mysqlnd
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-odbc
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-opcache
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-pdo
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-pgsql
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-process
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-pspell
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-recode
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-snmp
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-soap
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-tidy
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-xml
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-xmlrpc
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php-zip
Red Hat:rhel_software_collections:3::el6
 before 0:7.0.27-1.el6
0:7.0.27-1.el6
rh-php70-php
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-bcmath
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-cli
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-common
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-dba
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-dbg
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-debuginfo
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-devel
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-embedded
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-enchant
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-fpm
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-gd
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-gmp
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-intl
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-json
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-ldap
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-mbstring
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-mysqlnd
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-odbc
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-opcache
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-pdo
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-pgsql
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-process
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-pspell
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-recode
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-snmp
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-soap
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-xml
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-xmlrpc
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php70-php-zip
Red Hat:rhel_software_collections:3::el7
 before 0:7.0.27-1.el7
0:7.0.27-1.el7
rh-php71-php
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-bcmath
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-cli
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-common
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-dba
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-dbg
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-debuginfo
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-devel
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-embedded
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-enchant
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-fpm
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-gd
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-gmp
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-intl
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-json
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-ldap
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-mbstring
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-mysqlnd
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-odbc
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-opcache
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-pdo
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-pgsql
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-process
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-pspell
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-recode
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-snmp
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-soap
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-xml
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-xmlrpc
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-zip
Red Hat:rhel_software_collections:3::el7
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
php7
SUSE:Linux Enterprise Module for Web and Scripting 12
 before 7.0.7-50.18.1
7.0.7-50.18.1
php7
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 7.0.7-50.18.1
7.0.7-50.18.1
php7
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 7.0.7-50.18.1
7.0.7-50.18.1
php7.0
Ubuntu:16.04:LTS
 before 7.0.25-0ubuntu0.16.04.1, plus listed versions
7.0.1-57.0.1-67.0.2-17.0.2-37.0.2-4
Show 18 moreShow less
7.0.2-57.0.3-27.0.3-37.0.3-9ubuntu17.0.4-5ubuntu17.0.4-5ubuntu27.0.4-7ubuntu17.0.4-7ubuntu27.0.4-7ubuntu2.17.0.8-0ubuntu0.16.04.17.0.8-0ubuntu0.16.04.27.0.8-0ubuntu0.16.04.37.0.13-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.27.0.15-0ubuntu0.16.04.47.0.18-0ubuntu0.16.04.17.0.22-0ubuntu0.16.04.1
7.0.25-0ubuntu0.16.04.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-12932 is a critical vulnerability (CVSS 9.8) in Php, published August 18, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.42%, the 94th percentile. Fixed in php7.0 7.0.27-0+deb9u1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 89 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open