suse · CVE-2017-9118

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-9118 severity moderate: SUSE including 262 source package names (apache2-mod_php5-5.2.14-0.7.30.111.35.1, apache2-mod_php5-5.5.14-109.38.1, …), 656 product×package rows across 18 product lines (SUSE Enterprise Storage 7.1, SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS, … (18 product lines)): Known Not Affected 358, Fixed 298.

Description:

PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.