{"id":"CVE-2017-9118","aliases":["CLSA-2022-1646085834","CLSA-2025-1761577285","EUVD-2017-18056","GHSA-rhhv-cwx7-v2f7","MGASA-2021-0581","RHSA-2019:2519","SUSE-SU-2018:2640-1","SUSE-SU-2018:2681-1","SUSE-SU-2018:2682-1","UBUNTU-CVE-2017-9118","USN-5300-1","USN-5300-2"],"status":"published","title":"PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.","description":"PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02954,"percentile":0.87269,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2018-08-02T15:00:00Z","modified":"2026-10-24T10:30:24Z","fixes":[{"ecosystem":"Mageia:8","package":"php","fixed_in":["8.0.14-1.mga8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php7","fixed_in":["7.0.7-50.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php7","fixed_in":["7.0.7-50.49.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"php7.0","fixed_in":["7.0.33-0ubuntu0.16.04.16+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"php7.2","fixed_in":["7.2.24-0ubuntu0.18.04.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"php7.4","fixed_in":["7.4.3-4ubuntu2.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"php8.1","fixed_in":["8.1.2-1ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libapache2-mod-php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libphp7.0-embed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-bz2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-interbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-mcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-phpdbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-readline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-sybase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-xsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els2"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libapache2-mod-php7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libphp7.3-embed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-bz2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-interbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-phpdbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-readline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-sybase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-xsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"php7.3-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.14-1.mga8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-50.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-50.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19","5.5.9+dfsg-1ubuntu4.20","5.5.9+dfsg-1ubuntu4.21","5.5.9+dfsg-1ubuntu4.22","5.5.9+dfsg-1ubuntu4.23","5.5.9+dfsg-1ubuntu4.24","5.5.9+dfsg-1ubuntu4.25","5.5.9+dfsg-1ubuntu4.26","5.5.9+dfsg-1ubuntu4.27","5.5.9+dfsg-1ubuntu4.29","5.5.9+dfsg-1ubuntu4.29+esm1","5.5.9+dfsg-1ubuntu4.29+esm2","5.5.9+dfsg-1ubuntu4.29+esm3","5.5.9+dfsg-1ubuntu4.29+esm4","5.5.9+dfsg-1ubuntu4.29+esm5","5.5.9+dfsg-1ubuntu4.29+esm6","5.5.9+dfsg-1ubuntu4.29+esm8","5.5.9+dfsg-1ubuntu4.29+esm10","5.5.9+dfsg-1ubuntu4.29+esm11","5.5.9+dfsg-1ubuntu4.29+esm12","5.5.9+dfsg-1ubuntu4.29+esm13","5.5.9+dfsg-1ubuntu4.29+esm14","5.5.9+dfsg-1ubuntu4.29+esm15","5.5.9+dfsg-1ubuntu4.29+esm16","5.5.9+dfsg-1ubuntu4.29+esm17","5.5.9+dfsg-1ubuntu4.29+esm18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.16+esm3"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2","7.0.8-0ubuntu0.16.04.3","7.0.13-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.2","7.0.15-0ubuntu0.16.04.4","7.0.18-0ubuntu0.16.04.1","7.0.22-0ubuntu0.16.04.1","7.0.25-0ubuntu0.16.04.1","7.0.28-0ubuntu0.16.04.1","7.0.30-0ubuntu0.16.04.1","7.0.32-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.2","7.0.33-0ubuntu0.16.04.3","7.0.33-0ubuntu0.16.04.4","7.0.33-0ubuntu0.16.04.5","7.0.33-0ubuntu0.16.04.6","7.0.33-0ubuntu0.16.04.7","7.0.33-0ubuntu0.16.04.9","7.0.33-0ubuntu0.16.04.11","7.0.33-0ubuntu0.16.04.12","7.0.33-0ubuntu0.16.04.14","7.0.33-0ubuntu0.16.04.15","7.0.33-0ubuntu0.16.04.16","7.0.33-0ubuntu0.16.04.16+esm1","7.0.33-0ubuntu0.16.04.16+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"php7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.11"}]}],"versions":["7.2.1-1ubuntu2","7.2.2-1ubuntu1","7.2.2-1ubuntu2","7.2.3-1ubuntu1","7.2.5-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.2","7.2.10-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.2","7.2.17-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.1","7.2.24-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.3","7.2.24-0ubuntu0.18.04.4","7.2.24-0ubuntu0.18.04.6","7.2.24-0ubuntu0.18.04.7","7.2.24-0ubuntu0.18.04.8","7.2.24-0ubuntu0.18.04.9","7.2.24-0ubuntu0.18.04.10"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"php7.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.10"}]}],"versions":["7.4.3-4build1","7.4.3-4build2","7.4.3-4ubuntu1","7.4.3-4ubuntu1.1","7.4.3-4ubuntu2.2","7.4.3-4ubuntu2.4","7.4.3-4ubuntu2.5","7.4.3-4ubuntu2.6","7.4.3-4ubuntu2.7","7.4.3-4ubuntu2.8","7.4.3-4ubuntu2.9"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"php8.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.2-1ubuntu1"}]}],"versions":["8.1.0~rc4-1ubuntu2","8.1.0-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.16+esm3"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2","7.0.8-0ubuntu0.16.04.3","7.0.13-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.2","7.0.15-0ubuntu0.16.04.4","7.0.18-0ubuntu0.16.04.1","7.0.22-0ubuntu0.16.04.1","7.0.25-0ubuntu0.16.04.1","7.0.28-0ubuntu0.16.04.1","7.0.30-0ubuntu0.16.04.1","7.0.32-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.2","7.0.33-0ubuntu0.16.04.3","7.0.33-0ubuntu0.16.04.4","7.0.33-0ubuntu0.16.04.5","7.0.33-0ubuntu0.16.04.6","7.0.33-0ubuntu0.16.04.7","7.0.33-0ubuntu0.16.04.9","7.0.33-0ubuntu0.16.04.11","7.0.33-0ubuntu0.16.04.12","7.0.33-0ubuntu0.16.04.14","7.0.33-0ubuntu0.16.04.15","7.0.33-0ubuntu0.16.04.16","7.0.33-0ubuntu0.16.04.16+esm1","7.0.33-0ubuntu0.16.04.16+esm2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"php7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.11"}]}],"versions":["7.2.1-1ubuntu2","7.2.2-1ubuntu1","7.2.2-1ubuntu2","7.2.3-1ubuntu1","7.2.5-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.2","7.2.10-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.2","7.2.17-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.1","7.2.24-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.3","7.2.24-0ubuntu0.18.04.4","7.2.24-0ubuntu0.18.04.6","7.2.24-0ubuntu0.18.04.7","7.2.24-0ubuntu0.18.04.8","7.2.24-0ubuntu0.18.04.9","7.2.24-0ubuntu0.18.04.10"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"php7.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.10"}]}],"versions":["7.4.3-4build1","7.4.3-4build2","7.4.3-4ubuntu1","7.4.3-4ubuntu1.1","7.4.3-4ubuntu2.2","7.4.3-4ubuntu2.4","7.4.3-4ubuntu2.5","7.4.3-4ubuntu2.6","7.4.3-4ubuntu2.7","7.4.3-4ubuntu2.8","7.4.3-4ubuntu2.9"],"bundled":5}],"products":[{"vendor":"netapp","product":"storage_automation_store"},{"vendor":"php","product":"php"}],"references":[{"url":"https://security.netapp.com/advisory/ntap-20181107-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugs.php.net/bug.php?id=74604","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Vendor Advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2519","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9118","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-rhhv-cwx7-v2f7"},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1646085834","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761577285.html","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0581.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29775","tags":["report"]},{"url":"https://www.php.net/ChangeLog-8.php#8.0.14","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418983","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1484837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1512057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1551039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1563858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573797","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1629552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1680545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724154","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2519.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10166","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10166","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9118","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9118","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9120","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9120","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9120","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12932","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12932","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12932","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-16642","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-16642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16642","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5711","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5711","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5711","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5712","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5712","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5712","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-7584","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7584","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7584","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10545","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10545","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10545","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10546","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10546","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10547","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10547","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10548","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10548","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10549","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10549","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14851","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14851","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14851","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14884","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17082","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17082","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17082","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20783","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20783","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20783","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-6977","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-6977","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6977","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9020","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9020","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9020","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9021","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9021","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9021","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9022","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9022","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9022","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9023","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9023","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9024","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9024","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9024","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9637","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9637","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9637","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9638","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9638","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9640","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11034","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11034","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11034","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11035","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11035","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11035","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11036","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11036","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11036","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11038","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11038","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11038","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11039","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11039","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11040","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182640-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1105466","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9118","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182681-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1103659","tags":["report"]},{"url":"https://bugzilla.suse.com/1103836","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14883","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182682-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1096984","tags":["report"]},{"url":"https://bugzilla.suse.com/1099098","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12882","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-9118","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5300-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5300-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5300-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-9253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-8923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-21707","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-9118","description":"PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.","status":"published","published":"2018-08-02T15:00:00Z","modified":"2024-08-05T16:55:22.272Z","updated_at":"2026-11-02T14:33:13.606903Z"}],"euvd":[{"id":"EUVD-2017-18056","description":"PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.","status":"published","published":"2018-08-02T15:00:00Z","modified":"2024-08-05T16:55:22Z","updated_at":"2026-11-03T02:23:29.187521Z"}],"ghsa":[{"id":"GHSA-rhhv-cwx7-v2f7","title":"PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.","description":"PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.","status":"published","published":"2022-05-14T00:53:53Z","modified":"2023-02-03T05:01:35Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:53:00.497966Z"}],"nvd":[{"id":"CVE-2017-9118","description":"PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.","status":"published","published":"2018-08-02T15:29:00.23Z","modified":"2026-06-17T01:27:30.637Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:18.679411Z"}],"osv":[{"id":"CVE-2017-9118","description":"PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.","status":"published","published":"2018-08-02T15:29:00.23Z","modified":"2026-10-24T10:30:24.828044836Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:06.868403Z"},{"id":"RHSA-2019:2519","title":"Red Hat Security Advisory: rh-php71-php security, bug fix, and enhancement update","status":"published","published":"2024-09-13T22:00:42Z","modified":"2026-06-29T10:26:05Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2017-9118","description":"PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.","status":"published","published":"2018-08-02T15:29:00Z","modified":"2026-10-21T23:00:13.053988591Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"CLSA-2022-1646085834","title":"Fix CVE(s): CVE-2017-9118, CVE-2017-9119, CVE-2017-9120, CVE-2021-21707, CVE-2017-8923, CVE-2015-9253","description":"\n   * SECURITY UPDATE: Denial of service\n     - debian/patches/CVE-2015-9253-pre1.patch: include .inc files\n       used in fpm tests in sapi/fpm/tests/ alogin with other .phpt\n       test scripts.\n     - debian/patches/CVE-2015-9253-pre2.patch: close the listening\n       socket on sapi/fpm/fpm/fpm_signals.c and added tests in\n       sapi/fpm/tests/bug77934-reload-process-control.phpt.\n     - debian/patches/CVE-2015-9253.patch: directly listen\n       on socket, instead of dumping it to STDIN in\n       sapi/fpm/fpm/fpm_children.c, sapi/fpm/fpm_stdio.c,\n       and added tests in sapi/fpm/tests/bug73342-nonblocking-stdio.phpt.\n     - CVE-2015-9253\n   * SECURITY UPDATE: Integer overflow\n     - debian/patches/CVE-2017-8923-pre.patch: added ZSTR_MAX_LEN\n       macro in Zend/zend_string.h and make use of it in\n       Zend/zend_operators.c instead of using SIZE_MAX.\n     - debian/patches/CVE-2017-8923.patch: added a length check before\n       calling zend_string_realloc method in Zend/zend_vm_def.h and\n       Zend/zend_vm_execute.h.\n     - CVE-2017-8923\n   * SECURITY UPDATE: Integer overflow\n     - debian/patches/CVE-2017-9118.patch: added ZSTR_MAX_OVERHEAD\n       macro in Zend/zend_string.h that has the the maximal overhead\n       of a zend_string and uses it in ext/pcre/php_pcre.c to assign\n       a zend_string length value.\n     - CVE-2017-9118\n   * SECURITY UPDATE: Use after free\n     - debian/patches/CVE-2017-9119.patch: changed the decrement of\n       refcount to be made once the string allocation has succeeded in\n       Zend/zend_string.h.\n     - CVE-2017-9119\n   * SECURITY UPDATE: Integer overflow\n     - debian/patches/CVE-2017-9120.patch: changed the string allocation\n       from zend_string_alloc to zend_string_safe_alloc in\n       ext/mysqli/mysqli_api.c.\n     - CVE-2017-9120\n   * SECURITY UDPATE: Improper handling of special characters\n     - debian/patches/CVE-2021-21707.patch: added a string validation\n       to check for improper characters in ext/dom/domimplementation.c\n       and in ext/libxml/libxml.c and added tests in\n       ext/simplexml/tests/bug79971_1.phpt and\n       ext/dom/tests/bug79971_2.phpt.\n     - CVE-2021-21707","status":"published","published":"2022-02-28T22:03:54Z","modified":"2026-06-04T10:04:26.496726214Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2025-1761577285","title":"Fix of 5 CVEs","description":"   * SECURITY UPDATE: out-of-bounds access\n     - debian/patches/CVE-2017-9118.patch: fix out of bounds access in php_pcre_replace_impl\n     - CVE-2017-9118\n   * SECURITY UPDATE: improper validation of HTTP_REDIRECT_STATUS variable in CGI\n     binary\n     - debian/patches/CVE-2024-8927.patch: fix Apache server name check; remove\n       references to redirect.so and Netscape; check configuration override first\n     - CVE-2024-8927\n   * SECURITY UPDATE: buffer overread vulnerability\n     - debian/patches/CVE-2024-11233.patch: move bound check upwards to fix\n       single byte overread with convert.quoted-printable-decode filter\n     - CVE-2024-11233\n   * SECURITY UPDATE: URI is not properly sanitized\n     - debian/patches/CVE-2024-11234.patch: when using streams with configured\n       proxy and \"request_fulluri\" option, the URI is not properly sanitized which\n       can lead to HTTP request smuggling and allow the attacker to use the proxy to\n       perform arbitrary HTTP requests originating from the server, thus potentially\n       gaining access to resources not normally available to the external user\n     - CVE-2024-11234\n   * SECURITY UPDATE: incomplete check in escaping functions\n     - debian/patches/CVE-2025-1735.patch: pgsql and pdo_pgsql escaping functions do\n       not check if the underlying quoting functions returned errors. This could cause\n       crashes if Postgres server rejects the string as invalid.\n     - CVE-2025-1735","status":"published","published":"2025-10-27T15:01:32Z","modified":"2026-06-04T10:03:56.018751073Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"MGASA-2021-0581","title":"Updated php packages fix security vulnerability","description":"Out of bounds in php_pcre_replace_impl (CVE-2017-9118)\nMultiple bugs fixed. See referenced changelog for details.\n","status":"published","published":"2021-12-23T21:01:45Z","modified":"2026-04-16T04:41:33.777162045Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"SUSE-SU-2018:2640-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\n- CVE-2017-9118: Fixed an out of bounds access in php_pcre_replace_impl via a\n  crafted preg_replace call (bsc#1105466)\n","status":"published","published":"2018-09-06T14:43:32Z","modified":"2026-02-04T03:48:01.858737Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2681-1","title":"Security update for php53","description":"This update for php53 fixes the following issues:\n\nThe following security issues were fixed:\n\n- CVE-2018-14851: Fixed an out-of-bound read in exif_process_IFD_in_MAKERNOTE,\n  which could be exploited by an attacker via crafted JPG files, and could\n  result in an application crash. (bsc#1103659)\n- CVE-2018-14883: Fixed an integer overflow leading to a heap based buffer\n  over-read in exif_thumbnail_extract of exif.c. (bsc#1103836)\n- CVE-2017-9118: Fixed an out of bounds access in php_pcre_replace_impl via a\n  crafted preg_replace call (bsc#1105466)\n","status":"published","published":"2018-09-10T13:51:10Z","modified":"2026-02-04T03:05:46.825024Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2682-1","title":"Security update for php5","description":"This update for php5 fixes the following issues:\n\nThe following security issues were fixed:\n\n- CVE-2018-10360: Fixed an out-of-bounds read in the do_core_note function in\n  readelf.c in libmagic.a, which allowed remote attackers to cause a denial of\n  service via a crafted ELF file (bsc#1096984)\n- CVE-2018-14851: Fixed an out-of-bound read in exif_process_IFD_in_MAKERNOTE,\n  which could be exploited by an attacker via crafted JPG files, and could\n  result in an application crash. (bsc#1103659)\n- CVE-2018-12882: Fixed an use-after-free in exif_read_from_impl in\n  ext/exif/exif.c (bsc#1099098)\n- CVE-2017-9118: Fixed an out of bounds access in php_pcre_replace_impl via a\n  crafted preg_replace call (bsc#1105466)\n","status":"published","published":"2018-09-10T15:59:50Z","modified":"2026-02-04T03:05:42.26542Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"USN-5300-1","title":"php7.0 vulnerabilities","description":"It was discovered that PHP incorrectly handled certain scripts.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2015-9253, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120)\n\nIt was discovered that PHP incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause a denial of service,\nor possibly obtain sensitive information. (CVE-2017-9119)\n\nIt was discovered that PHP incorrectly handled certain scripts with XML\nparsing functions.\nAn attacker could possibly use this issue to obtain sensitive information.\n(CVE-2021-21707)\n","status":"published","published":"2022-02-22T20:26:05Z","modified":"2026-06-25T13:31:02.106320708Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5300-2","title":"php7.2, php7.4 vulnerabilities","description":"USN-5300-1 fixed vulnerabilities in PHP. This update provides the\ncorresponding updates for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that PHP incorrectly handled certain scripts.\n An attacker could possibly use this issue to cause a denial of service.\n (CVE-2015-9253, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120)\n \n It was discovered that PHP incorrectly handled certain inputs.\n An attacker could possibly use this issue to cause a denial of service,\n or possibly obtain sensitive information. (CVE-2017-9119)\n \n It was discovered that PHP incorrectly handled certain scripts with XML\n parsing functions.\n An attacker could possibly use this issue to obtain sensitive information.\n (CVE-2021-21707)\n","status":"published","published":"2022-03-03T13:58:39Z","modified":"2026-04-27T18:59:21.167451Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}