← All advisories

High severity7.5NVD Advisory· Published Aug 2, 2018· Updated Jun 17, 2026

CVE-2017-9118

CVE-2017-9118

Description

PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7

osv-coords7 versions
pkg:rpm/suse/php53&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/php53&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/php53&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/php5&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012 pkg:rpm/suse/php5&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3
< 5.3.17-112.38.1+ 6 more
- (no CPE)range: < 5.3.17-112.38.1
- (no CPE)range: < 5.3.17-112.38.1
- (no CPE)range: < 5.3.17-112.38.1
- (no CPE)range: < 5.5.14-109.38.1
- (no CPE)range: < 5.5.14-109.38.1
- (no CPE)range: < 7.0.7-50.49.1
- (no CPE)range: < 7.0.7-50.49.1

Patches

Vulnerability mechanics

References

3

bugs.php.net/bug.phpnvdExploitIssue TrackingVendor Advisory
access.redhat.com/errata/RHSA-2019:2519nvdThird Party Advisory
security.netapp.com/advisory/ntap-20181107-0003/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.