CVE-2017-9119: Netapp Clustered Data Ontap

Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days.

The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures.

Affected products

• Netapp Clustered Data Ontap: affected versions not specified
• Netapp Storage Automation Store: affected versions not specified
• PHP PHP: version 7.1.5 only

Published 2017-05-21. Last modified 2026-06-17.