CVE-2017-9120 PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer ove...
CriticalCVSS 9.8
EPSS 7.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer overflow in mysqli_real_escape_string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | >= 7.0.0, <= 7.1.5 | No fix listed |
| PHP | >= 7.4.0, < 7.4.23 | 7.4.23 |
| PHP | >= 8.0.0, < 8.0.10 | 8.0.10 |
| netapp storage automation store | All versions | No fix listed |
References
- RHSA-2019:2519 third-party-advisory vendor-advisory
- bugs.php.net exploit issue-tracking patch vendor-advisory
- security.netapp.com third-party-advisory