Every CVE Search/ Get API key

CVE-2017-9119

The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a...

9.8 CriticalFix available

The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

3.56%Up 2.5 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures.

Record
CVE-2017-9119
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-400
Updated
2026-11-02
CVE List No score

The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures.

Record
CVE-2017-9119
Updated
2026-11-02
EUVDEUVD-2017-18057 No score

The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures.

Record
EUVD-2017-18057
Updated
2026-11-03
GitHub AdvisoriesGHSA-r9gg-92mp-v9h5 9.8

The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a...

The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures.

Record
GHSA-r9gg-92mp-v9h5
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-400
Updated
2026-11-02
OSV 9.8

The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures.

Record
CVE-2017-9119
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2017-9119 9.8

The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures.

Record
UBUNTU-CVE-2017-9119
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVCLSA-2022-1646085834 No score

Fix CVE(s): CVE-2017-9118, CVE-2017-9119, CVE-2017-9120, CVE-2021-21707, CVE-2017-8923, CVE-2015-9253

  • SECURITY UPDATE: Denial of service
    • debian/patches/CVE-2015-9253-pre1.patch: include .inc files used in fpm tests in sapi/fpm/tests/ alogin with other .phpt test scripts.
    • debian/patches/CVE-2015-9253-pre2.patch: close the listening socket on sapi/fpm/fpm/fpm_signals.c and added tests in sapi/fpm/tests/bug77934-reload-process-control.phpt.
    • debian/patches/CVE-2015-9253.patch: directly listen on socket, instead of dumping it to STDIN in sapi/fpm/fpm/fpm_children.c, sapi/fpm/fpm_stdio.c, and added tests in sapi/fpm/tests/bug73342-nonblocking-stdio.phpt.
    • CVE-2015-9253
  • SECURITY UPDATE: Integer overflow
    • debian/patches/CVE-2017-8923-pre.patch: added ZSTR_MAX_LEN macro in Zend/zend_string.h and make use of it in Zend/zend_operators.c instead of using SIZE_MAX.
    • debian/patches/CVE-2017-8923.patch: added a length check before calling zend_string_realloc method in Zend/zend_vm_def.h and Zend/zend_vm_execute.h.
    • CVE-2017-8923
  • SECURITY UPDATE: Integer overflow
    • debian/patches/CVE-2017-9118.patch: added ZSTR_MAX_OVERHEAD macro in Zend/zend_string.h that has the the maximal overhead of a zend_string and uses it in ext/pcre/php_pcre.c to assign a zend_string length value.
    • CVE-2017-9118
  • SECURITY UPDATE: Use after free
    • debian/patches/CVE-2017-9119.patch: changed the decrement of refcount to be made once the string allocation has succeeded in Zend/zend_string.h.
    • CVE-2017-9119
  • SECURITY UPDATE: Integer overflow
    • debian/patches/CVE-2017-9120.patch: changed the string allocation from zend_string_alloc to zend_string_safe_alloc in ext/mysqli/mysqli_api.c.
    • CVE-2017-9120
  • SECURITY UDPATE: Improper handling of special characters
    • debian/patches/CVE-2021-21707.patch: added a string validation to check for improper characters in ext/dom/domimplementation.c and in ext/libxml/libxml.c and added tests in ext/simplexml/tests/bug79971_1.phpt and ext/dom/tests/bug79971_2.phpt.
    • CVE-2021-21707
Record
CLSA-2022-1646085834
Updated
2026-11-02
OSVCLSA-2026-1772811390 No score

php: Fix of CVE-2017-9119

  • CVE-2017-9119: handle memory limit error during string reallocation correctly
Record
CLSA-2026-1772811390
Updated
2026-11-02
OSVCLSA-2026-1772813746 No score

php: Fix of CVE-2017-9119

  • CVE-2017-9119: handle memory limit error during string reallocation correctly
Record
CLSA-2026-1772813746
Updated
2026-11-02
OSVUSN-5300-1 No score

php7.0 vulnerabilities

It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service. (CVE-2015-9253, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120)

It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or possibly obtain sensitive information. (CVE-2017-9119)

It was discovered that PHP incorrectly handled certain scripts with XML parsing functions. An attacker could possibly use this issue to obtain sensitive information. (CVE-2021-21707)

Record
USN-5300-1
Updated
2026-11-02
OSVUSN-5300-2 No score

php7.2, php7.4 vulnerabilities

USN-5300-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.

Original advisory details:

It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service. (CVE-2015-9253, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120)

It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or possibly obtain sensitive information. (CVE-2017-9119)

It was discovered that PHP incorrectly handled certain scripts with XML parsing functions. An attacker could possibly use this issue to obtain sensitive information. (CVE-2021-21707)

Record
USN-5300-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libapache2-mod-php7.0
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
libphp7.0-embed
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-bcmath
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-bz2
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-cgi
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-cli
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-common
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-curl
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-dba
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
Show 87 moreShow less
Affected packages
PackageAffectedFixed
php7.0-dev
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-enchant
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-fpm
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-gd
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-gmp
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-imap
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-interbase
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-intl
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-json
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-ldap
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-mbstring
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-mcrypt
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-mysql
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-odbc
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-opcache
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-pgsql
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-phpdbg
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-pspell
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-readline
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-recode
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-snmp
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-soap
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-sqlite3
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-sybase
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-tidy
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-xml
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-xmlrpc
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-xsl
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php7.0-zip
TuxCare:Ubuntu:16.04
 before 7.0.33-0ubuntu0.16.04.17+tuxcare.els2
7.0.33-0ubuntu0.16.04.17+tuxcare.els2
php
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-bcmath
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-cli
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-common
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-dba
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-dbg
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-devel
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-embedded
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-enchant
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-ffi
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-fpm
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-gd
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-gmp
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-intl
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-json
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-ldap
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-mbstring
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-mysqlnd
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-odbc
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-opcache
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-pdo
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-pgsql
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-process
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-snmp
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-soap
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-xml
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php-xmlrpc
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
7.4.6-4.module_el8.4.0+2358+0f287362.tuxcare.els26
php
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-bcmath
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-cli
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-common
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-dba
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-dbg
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-devel
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-embedded
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-enchant
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-fpm
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-gd
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-gmp
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-intl
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-json
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-ldap
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-mbstring
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-mysqlnd
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-odbc
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-opcache
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-pdo
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-pgsql
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-process
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-recode
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-snmp
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-soap
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-xml
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php-xmlrpc
TuxCare:CentOS-Stream:8
 before 7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18
php5
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
5.5.3+dfsg-1ubuntu25.5.3+dfsg-1ubuntu35.5.6+dfsg-1ubuntu15.5.6+dfsg-1ubuntu25.5.8+dfsg-2ubuntu1
Show 44 moreShow less
5.5.9+dfsg-1ubuntu15.5.9+dfsg-1ubuntu25.5.9+dfsg-1ubuntu35.5.9+dfsg-1ubuntu45.5.9+dfsg-1ubuntu4.15.5.9+dfsg-1ubuntu4.25.5.9+dfsg-1ubuntu4.35.5.9+dfsg-1ubuntu4.45.5.9+dfsg-1ubuntu4.55.5.9+dfsg-1ubuntu4.65.5.9+dfsg-1ubuntu4.75.5.9+dfsg-1ubuntu4.95.5.9+dfsg-1ubuntu4.115.5.9+dfsg-1ubuntu4.125.5.9+dfsg-1ubuntu4.135.5.9+dfsg-1ubuntu4.145.5.9+dfsg-1ubuntu4.165.5.9+dfsg-1ubuntu4.175.5.9+dfsg-1ubuntu4.195.5.9+dfsg-1ubuntu4.205.5.9+dfsg-1ubuntu4.215.5.9+dfsg-1ubuntu4.225.5.9+dfsg-1ubuntu4.235.5.9+dfsg-1ubuntu4.245.5.9+dfsg-1ubuntu4.255.5.9+dfsg-1ubuntu4.265.5.9+dfsg-1ubuntu4.275.5.9+dfsg-1ubuntu4.295.5.9+dfsg-1ubuntu4.29+esm15.5.9+dfsg-1ubuntu4.29+esm25.5.9+dfsg-1ubuntu4.29+esm35.5.9+dfsg-1ubuntu4.29+esm45.5.9+dfsg-1ubuntu4.29+esm55.5.9+dfsg-1ubuntu4.29+esm65.5.9+dfsg-1ubuntu4.29+esm85.5.9+dfsg-1ubuntu4.29+esm105.5.9+dfsg-1ubuntu4.29+esm115.5.9+dfsg-1ubuntu4.29+esm125.5.9+dfsg-1ubuntu4.29+esm135.5.9+dfsg-1ubuntu4.29+esm145.5.9+dfsg-1ubuntu4.29+esm155.5.9+dfsg-1ubuntu4.29+esm165.5.9+dfsg-1ubuntu4.29+esm175.5.9+dfsg-1ubuntu4.29+esm18
 None known
php7.0
Ubuntu:Pro:16.04:LTS
 before 7.0.33-0ubuntu0.16.04.16+esm3, plus listed versions
7.0.1-57.0.1-67.0.2-17.0.2-37.0.2-4
Show 37 moreShow less
7.0.2-57.0.3-27.0.3-37.0.3-9ubuntu17.0.4-5ubuntu17.0.4-5ubuntu27.0.4-7ubuntu17.0.4-7ubuntu27.0.4-7ubuntu2.17.0.8-0ubuntu0.16.04.17.0.8-0ubuntu0.16.04.27.0.8-0ubuntu0.16.04.37.0.13-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.27.0.15-0ubuntu0.16.04.47.0.18-0ubuntu0.16.04.17.0.22-0ubuntu0.16.04.17.0.25-0ubuntu0.16.04.17.0.28-0ubuntu0.16.04.17.0.30-0ubuntu0.16.04.17.0.32-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.27.0.33-0ubuntu0.16.04.37.0.33-0ubuntu0.16.04.47.0.33-0ubuntu0.16.04.57.0.33-0ubuntu0.16.04.67.0.33-0ubuntu0.16.04.77.0.33-0ubuntu0.16.04.97.0.33-0ubuntu0.16.04.117.0.33-0ubuntu0.16.04.127.0.33-0ubuntu0.16.04.147.0.33-0ubuntu0.16.04.157.0.33-0ubuntu0.16.04.167.0.33-0ubuntu0.16.04.16+esm17.0.33-0ubuntu0.16.04.16+esm2
7.0.33-0ubuntu0.16.04.16+esm3
php7.2
Ubuntu:18.04:LTS
 before 7.2.24-0ubuntu0.18.04.11, plus listed versions
7.2.1-1ubuntu27.2.2-1ubuntu17.2.2-1ubuntu27.2.3-1ubuntu17.2.5-0ubuntu0.18.04.1
Show 17 moreShow less
7.2.7-0ubuntu0.18.04.17.2.7-0ubuntu0.18.04.27.2.10-0ubuntu0.18.04.17.2.15-0ubuntu0.18.04.17.2.15-0ubuntu0.18.04.27.2.17-0ubuntu0.18.04.17.2.19-0ubuntu0.18.04.17.2.19-0ubuntu0.18.04.27.2.24-0ubuntu0.18.04.17.2.24-0ubuntu0.18.04.27.2.24-0ubuntu0.18.04.37.2.24-0ubuntu0.18.04.47.2.24-0ubuntu0.18.04.67.2.24-0ubuntu0.18.04.77.2.24-0ubuntu0.18.04.87.2.24-0ubuntu0.18.04.97.2.24-0ubuntu0.18.04.10
7.2.24-0ubuntu0.18.04.11
php7.4
Ubuntu:20.04:LTS
 before 7.4.3-4ubuntu2.10, plus listed versions
7.4.3-4build17.4.3-4build27.4.3-4ubuntu17.4.3-4ubuntu1.17.4.3-4ubuntu2.2
Show 6 moreShow less
7.4.3-4ubuntu2.47.4.3-4ubuntu2.57.4.3-4ubuntu2.67.4.3-4ubuntu2.77.4.3-4ubuntu2.87.4.3-4ubuntu2.9
7.4.3-4ubuntu2.10

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-9119 is a critical vulnerability (CVSS 9.8) in Php, published May 21, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.56%, the 89th percentile. Fixed in libapache2-mod-php7.0 7.0.33-0ubuntu0.16.04.17+tuxcare.els2.

References

Show 11 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open