CVE-2017-9120: Netapp Storage Automation Store

Critical severity, CVSS 9.8. EPSS: 7.6% chance of exploitation in the next 30 days.

PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer overflow in mysqli_real_escape_string.

Affected products

• Netapp Storage Automation Store: affected versions not specified
• PHP PHP: from 7.0.0, up to and including 7.1.5; from 7.4.0, before 7.4.23 (fixed in 7.4.23); from 8.0.0, before 8.0.10 (fixed in 8.0.10)

Published 2018-08-02. Last modified 2026-06-17.