high7.5
CVE-2018-19396
ext/standard/var_unserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of service (application crash) via an unserialize call for the com…
Impact
ext/standard/var_unserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of service (application crash) via an unserialize call for the com, dotnet, or variant class.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php | Php | from 5.0.0 through 7.1.24 |