CVE-2017-9118

Reference Links

• https://www.cve.org/CVERecord?id=CVE-2017-9118 https://nvd.nist.gov/vuln/detail/CVE-2017-9118
• https://bugzilla.redhat.com/show_bug.cgi?id=1611890
• https://access.redhat.com/errata/RHSA-2019:2519
• https://access.redhat.com/security/cve/cve-2017-9118
• https://bugs.php.net/bug.php?id=74604
• https://security.netapp.com/advisory/ntap-20181107-0003/
• https://launchpad.net/bugs/cve/CVE-2017-9118
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1611891
• https://wiki.php.net/security
• https://security-tracker.debian.org/tracker/CVE-2017-9118
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9118
• https://nvd.nist.gov/vuln/detail/CVE-2017-9118
• https://ubuntu.com/security/CVE-2017-9118

Parent vulnerabilities

(Appears in the following advisories)

• RHSA-2019:2519

Frequently Asked Questions

• What is CVE-2017-9118?

  CVE-2017-9118 is a vulnerability in PHP 7.1.5 that allows for an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.

• What software is affected by CVE-2017-9118?

  PHP 7.1.5 and potentially other versions of PHP are affected.

• What is the severity of CVE-2017-9118?

  CVE-2017-9118 has a severity score of 7.5, which is considered high.

• How can I fix CVE-2017-9118?

  Update your PHP version to a secure and patched release, such as PHP 7.1.30-1.el7 or a later version.

• Where can I find more information about CVE-2017-9118?

  You can find more information about CVE-2017-9118 on the PHP bug tracker (https://bugs.php.net/bug.php?id=74604), Red Hat bugzilla (https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1611891), and PHP security wiki (https://wiki.php.net/security).