CVE-2006-3017
- State
- Published
- Severity
- Not scored
- Published
- Jun 14, 2006
- Updated
- Aug 7, 2024
- Reserved
- Jun 14, 2006
Description
zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 21723third-party-advisory
- https://issues.rpath.com/browse/RPL-683
- 21252third-party-advisory
- 21202third-party-advisory
- http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&view=log
- TLSA-2006-38vendor-advisory
- http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&r1=1.87.4.8.2.1&r2=1.87.4.8.2.2
- DSA-1206vendor-advisory
- 21050third-party-advisory
- SUSE-SA:2006:031vendor-advisory
- 20060806 PHP: Zend_Hash_Del_Key_Or_Index Vulnerabilitymailing-list
- 26466vdb-entry
- 22713third-party-advisory
- RHSA-2006:0568vendor-advisory
- 21135third-party-advisory
- http://www.php.net/release_5_1_3.php
- 20061005 rPSA-2006-0182-1 php php-mysql php-pgsqlmailing-list
- 1016649vdb-entry
- RHSA-2006:0549vendor-advisory
- 22225third-party-advisory
- MDKSA-2006:122vendor-advisory
- 21125third-party-advisory
- 19927third-party-advisory
- 25255vdb-entry
- php-zendhashdel-unspecified(27396)vdb-entry
- 1016306vdb-entry
- 21031third-party-advisory
- RHSA-2006:0567vendor-advisory
- oval:org.mitre.oval:def:10118vdb-entrysignature
- http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html
- http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm
- USN-320-1vendor-advisory
- 20060806 PHP: Zend_Hash_Del_Key_Or_Index Vulnerabilitymailing-list
- SUSE-SA:2006:034vendor-advisory
- 17843vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.