Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-mbstringUpgrade php-pgsqlUpgrade php-pearUpgrade php-develUpgrade php-odbcUpgrade php-soapUpgrade php-commonUpgrade php-pecl-rrdUpgrade php-jsonUpgrade php-pdoUpgrade php-processUpgrade php-gmpUpgrade onigurumaUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebugUpgrade phpUpgrade php-bcmathUpgrade php-recodeUpgrade php-pecl-apcuUpgrade oniguruma-develUpgrade php-cliUpgrade libzip-toolsUpgrade php-dbaUpgrade php-intlUpgrade php-ldapUpgrade libzip-develUpgrade php-xmlUpgrade apcu-panelUpgrade php-snmpUpgrade php-mysqlndUpgrade libzipUpgrade php-gdUpgrade php-dbgUpgrade php-enchantUpgrade php-pecl-zipUpgrade php-opcacheUpgrade php-embedded | May 4, 2022 | Sep 9, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Sep 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade oniguruma-debuginfoUpgrade oniguruma-develUpgrade oniguruma | Apr 27, 2020 | Sep 9, 2019 |
| Centos_linux | — | Upgrade php-gdUpgrade php-debugsourceUpgrade libzip-debuginfoUpgrade php-gmp-debuginfoUpgrade php-fpm-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-ldapUpgrade phpUpgrade libzip-debugsourceUpgrade php-intlUpgrade php-pecl-zip-debuginfoUpgrade php-process-debuginfoUpgrade php-recodeUpgrade php-cliUpgrade libzip-toolsUpgrade php-embeddedUpgrade php-mbstring-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-apcuUpgrade libzip-develUpgrade php-pecl-rrd-debugsourceUpgrade php-gd-debuginfoUpgrade php-dbaUpgrade php-dbgUpgrade php-pecl-apcu-debugsourceUpgrade libzipUpgrade php-pgsql-debuginfoUpgrade php-enchantUpgrade php-opcacheUpgrade php-pecl-zipUpgrade apcu-panelUpgrade php-embedded-debuginfoUpgrade php-odbcUpgrade php-mysqlndUpgrade php-bcmath-debuginfoUpgrade php-bcmathUpgrade php-json-debuginfoUpgrade php-soap-debuginfoUpgrade php-snmpUpgrade php-cli-debuginfoUpgrade php-gmpUpgrade php-pecl-rrdUpgrade php-xmlUpgrade php-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-processUpgrade php-commonUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade php-pdo-debuginfoUpgrade php-common-debuginfoUpgrade php-pgsqlUpgrade libzip-tools-debuginfoUpgrade php-soapUpgrade php-jsonUpgrade php-xmlrpc-debuginfoUpgrade php-xmlrpcUpgrade php-develUpgrade php-mbstringUpgrade php-dba-debuginfoUpgrade php-recode-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pearUpgrade php-dbg-debuginfoUpgrade php-snmp-debuginfoUpgrade php-fpm | Sep 9, 2020 | Sep 9, 2019 |
| Debian | — | Upgrade libonig | Sep 13, 2019 | Sep 13, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Jan 3, 2020 | Sep 9, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Sep 9, 2019 |
| Oracle_linux | — | Upgrade php-mysqlndUpgrade php-odbcUpgrade php-fpmUpgrade php-jsonUpgrade php-cliUpgrade php-pecl-apcuUpgrade php-commonUpgrade php-xmlUpgrade php-ldapUpgrade php-bcmathUpgrade php-pearUpgrade php-gmpUpgrade php-pecl-zipUpgrade phpUpgrade php-pdoUpgrade php-dbgUpgrade php-snmpUpgrade php-pecl-xdebugUpgrade php-recodeUpgrade php-develUpgrade php-embeddedUpgrade libzipUpgrade onigurumaUpgrade php-pgsqlUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade oniguruma-develUpgrade php-soapUpgrade php-enchantUpgrade php-pecl-rrdUpgrade php-opcacheUpgrade libzip-develUpgrade php-intlUpgrade php-mbstringUpgrade apcu-panelUpgrade php-xmlrpcUpgrade php-processUpgrade php-gdUpgrade libzip-tools | Sep 10, 2020 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade php-soapUpgrade phpUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade libzipUpgrade php-opcacheUpgrade onigurumaUpgrade php-xmlrpc-debuginfoUpgrade php-intl-debuginfoUpgrade php-process-debuginfoUpgrade php-enchantUpgrade php-bcmath-debuginfoUpgrade php-xmlrpcUpgrade php-recodeUpgrade libzip-debugsourceUpgrade oniguruma-debugsourceUpgrade oniguruma-debuginfoUpgrade php-mysqlndUpgrade php-pdoUpgrade php-embedded-debuginfoUpgrade php-pecl-rrdUpgrade php-pecl-zipUpgrade php-pearUpgrade php-cli-debuginfoUpgrade php-gdUpgrade php-debugsourceUpgrade php-snmp-debuginfoUpgrade php-processUpgrade php-pdo-debuginfoUpgrade php-embeddedUpgrade libzip-toolsUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-gmpUpgrade php-opcache-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-xdebugUpgrade php-gd-debuginfoUpgrade php-pecl-apcu-develUpgrade php-ldap-debuginfoUpgrade php-mbstringUpgrade php-jsonUpgrade php-dbaUpgrade php-debuginfoUpgrade php-pecl-apcuUpgrade php-fpmUpgrade php-pecl-zip-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-enchant-debuginfoUpgrade php-cliUpgrade php-pecl-apcu-debugsourceUpgrade php-dbgUpgrade php-snmpUpgrade php-intlUpgrade oniguruma-develUpgrade php-soap-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pgsqlUpgrade php-fpm-debuginfoUpgrade php-odbcUpgrade libzip-develUpgrade php-pecl-zip-debugsourceUpgrade php-dba-debuginfoUpgrade apcu-panelUpgrade php-mysqlnd-debuginfoUpgrade php-ldapUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade php-recode-debuginfoUpgrade php-xmlUpgrade php-commonUpgrade php-xml-debuginfoUpgrade php-odbc-debuginfoUpgrade php-common-debuginfoNo solution existsUpgrade php-json-debuginfoUpgrade php-develUpgrade php-bcmathUpgrade libzip-debuginfoUpgrade php-pgsql-debuginfo | Sep 9, 2020 | Sep 9, 2019 |
| Rocky_linux | — | Upgrade libzip-develUpgrade php-xmlrpcUpgrade php-dbg-debuginfoUpgrade php-dbgUpgrade php-embeddedUpgrade php-debugsourceUpgrade php-fpmUpgrade php-pecl-zip-debuginfoUpgrade php-enchant-debuginfoUpgrade php-recodeUpgrade phpUpgrade php-mbstringUpgrade php-xmlUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-develUpgrade php-ldapUpgrade php-soap-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-commonUpgrade php-pecl-xdebugUpgrade php-snmpUpgrade php-cliUpgrade php-common-debuginfoUpgrade php-opcacheUpgrade php-pecl-apcuUpgrade php-recode-debuginfoUpgrade php-debuginfoUpgrade php-mysqlndUpgrade php-gmp-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-rrdUpgrade php-jsonUpgrade libzip-debuginfoUpgrade php-pgsqlUpgrade php-cli-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-gdUpgrade php-dba-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-enchantUpgrade php-intlUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-develUpgrade php-fpm-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-opcache-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pdoUpgrade php-pecl-xdebug-debugsourceUpgrade php-odbcUpgrade libzip-debugsourceUpgrade php-soapUpgrade php-json-debuginfoUpgrade php-processUpgrade php-pecl-zipUpgrade php-gmpUpgrade php-dbaUpgrade libzipUpgrade php-bcmathUpgrade php-mbstring-debuginfoUpgrade libzip-toolsUpgrade php-snmp-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-xml-debuginfoUpgrade php-gd-debuginfo | Mar 12, 2024 | Sep 9, 2019 |
| Suse | — | Upgrade oniguruma-develUpgrade libonig4 | Aug 9, 2024 | Sep 9, 2019 |
| Ubuntu | — | Upgrade libonig2 (Ubuntu Pro)Upgrade libonig4 (Ubuntu Pro) | Aug 18, 2020 | Sep 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub