CVE-2017-9118

    Dashboard / Vulnerabilities / CVE-2017-9118

    CVE-2017-9118

    Published: 2 Aug 2018Last Modified: 7 Aug 2026

    Summary:

    Details: PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.

    References: https://access.redhat.com/errata/RHSA-2019:2519, https://security.netapp.com/advisory/ntap-20181107-0003/, https://bugs.php.net/bug.php?id=74604

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 3c7824e16ec4c3cee417262445d2c2b66531c10f
    Fixed -96f753a2b56b7c4927f1a64253ca60bb481ee2c3

    Affected versions

    7.1.5

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High