CVE-2017-9118: Netapp Storage Automation Store

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.

Affected products

• Netapp Storage Automation Store: affected versions not specified
• PHP PHP: from 7.4.0, before 7.4.27 (fixed in 7.4.27); from 8.0.0, before 8.0.14 (fixed in 8.0.14); from 8.1.0, before 8.1.1 (fixed in 8.1.1); version 7.1.5 only

Published 2018-08-02. Last modified 2026-06-17.