CVE-2017-9118 PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.
HighCVSS 7.5
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/php8.1(Ubuntu:22.04) | < 8.1.2-1ubuntu1 | 8.1.2-1ubuntu1 |
| PHP | >= 7.4.0, < 7.4.27 | 7.4.27 |
| PHP | >= 8.0.0, < 8.0.14 | 8.0.14 |
| PHP | >= 8.1.0, < 8.1.1 | 8.1.1 |
| PHP | = 7.1.5 | No fix listed |
| netapp storage automation store | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-5300-1 vendor-advisory
- USN-5300-2 vendor-advisory
- USN-5300-3 vendor-advisory
- www.cve.org
- RHSA-2019:2519 third-party-advisory vendor-advisory
- bugs.php.net exploit issue-tracking vendor-advisory
- security.netapp.com third-party-advisory