Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-mbstringUpgrade php-xmlrpcUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-opcacheUpgrade php-dbaUpgrade php-embeddedUpgrade php-mysqlndUpgrade php-gdUpgrade php-enchantUpgrade php-soapUpgrade php-processUpgrade libzip-toolsUpgrade php-pecl-rrdUpgrade php-recodeUpgrade php-jsonUpgrade php-ldapUpgrade php-bcmathUpgrade php-intlUpgrade php-cliUpgrade libzip-develUpgrade php-commonUpgrade phpUpgrade apcu-panelUpgrade php-pecl-apcuUpgrade php-develUpgrade php-gmpUpgrade php-pgsqlUpgrade php-dbgUpgrade php-odbcUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-xmlUpgrade libzipUpgrade php-snmpUpgrade php-pearUpgrade php-pdo | May 4, 2022 | Nov 25, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Jan 3, 2020 | Nov 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade oniguruma-debuginfoUpgrade oniguruma-develUpgrade oniguruma | Apr 27, 2020 | Nov 25, 2019 |
| Centos_linux | — | Upgrade php-gd-debuginfoUpgrade php-pecl-rrdUpgrade php-gdUpgrade php-recode-debuginfoUpgrade php-recodeUpgrade php-intlUpgrade libzip-toolsUpgrade php-ldapUpgrade php-xmlUpgrade php-processUpgrade php-embeddedUpgrade php-gmp-debuginfoUpgrade php-ldap-debuginfoUpgrade php-mysqlndUpgrade php-soap-debuginfoUpgrade php-dbg-debuginfoUpgrade libzip-develUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-zipUpgrade php-debugsourceUpgrade phpUpgrade php-pecl-apcu-debuginfoUpgrade php-opcacheUpgrade php-pecl-apcuUpgrade php-enchantUpgrade apcu-panelUpgrade php-bcmath-debuginfoUpgrade php-embedded-debuginfoUpgrade php-cliUpgrade php-bcmathUpgrade php-pgsql-debuginfoUpgrade libzipUpgrade php-snmpUpgrade php-opcache-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dbgUpgrade php-json-debuginfoUpgrade php-enchant-debuginfoUpgrade php-dbaUpgrade php-pecl-xdebug-debugsourceUpgrade php-mbstringUpgrade php-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-soapUpgrade php-dba-debuginfoUpgrade php-pearUpgrade php-pgsqlUpgrade php-pecl-apcu-debugsourceUpgrade php-xml-debuginfoUpgrade php-pecl-xdebugUpgrade php-fpm-debuginfoUpgrade php-odbc-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-common-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-intl-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcu-develUpgrade php-commonUpgrade libzip-debugsourceUpgrade php-odbcUpgrade php-develUpgrade php-pdoUpgrade php-process-debuginfoUpgrade php-xmlrpcUpgrade php-snmp-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade libzip-debuginfoUpgrade php-jsonUpgrade php-fpmUpgrade php-gmp | Sep 9, 2020 | Nov 25, 2019 |
| Debian | — | Upgrade libonig | Dec 5, 2019 | Nov 25, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-pgsqlUpgrade php-mysqlUpgrade php-odbcUpgrade php-ldapUpgrade php-xmlUpgrade php-commonUpgrade php-cliUpgrade php-soapUpgrade php-pdoUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-gdUpgrade php-processUpgrade php | Nov 3, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-pdoUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-mysqlUpgrade php-commonUpgrade php-soapUpgrade php-odbcUpgrade php-processUpgrade phpUpgrade php-recodeUpgrade php-gdUpgrade php-xmlUpgrade php-ldapUpgrade php-cli | Sep 28, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-xmlUpgrade php-processUpgrade php-recodeUpgrade php-ldapUpgrade php-cliUpgrade phpUpgrade php-pdoUpgrade php-odbcUpgrade php-commonUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php-soapUpgrade php-gd | Feb 24, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Jan 3, 2020 | Nov 25, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.4-11.4.17.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Nov 25, 2019 |
| Oracle_linux | — | Upgrade php-pdoUpgrade php-dbaUpgrade php-pecl-xdebugUpgrade php-embeddedUpgrade php-cliUpgrade php-pecl-zipUpgrade php-xmlrpcUpgrade php-gmpUpgrade php-pearUpgrade php-bcmathUpgrade libzip-toolsUpgrade php-processUpgrade php-mysqlndUpgrade phpUpgrade php-jsonUpgrade php-recodeUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-mbstringUpgrade libzipUpgrade php-opcacheUpgrade php-enchantUpgrade php-pgsqlUpgrade php-dbgUpgrade php-xmlUpgrade php-commonUpgrade php-intlUpgrade php-pecl-apcuUpgrade php-develUpgrade php-snmpUpgrade php-fpmUpgrade php-odbcUpgrade apcu-panelUpgrade php-ldapUpgrade libzip-devel | Sep 10, 2020 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade php-recode-debuginfoUpgrade php-jsonUpgrade php-bcmathUpgrade php-snmpUpgrade php-gd-debuginfoUpgrade php-enchant-debuginfoUpgrade php-develUpgrade php-fpmUpgrade php-xmlrpc-debuginfoNo solution existsUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcuUpgrade php-enchantUpgrade php-xmlUpgrade php-common-debuginfoUpgrade php-pearUpgrade php-pecl-xdebug-debugsourceUpgrade php-ldapUpgrade php-pecl-zip-debugsourceUpgrade php-gmpUpgrade php-commonUpgrade php-cliUpgrade php-odbc-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-dbg-debuginfoUpgrade libzipUpgrade php-pdoUpgrade php-mbstringUpgrade php-pecl-zipUpgrade php-pecl-zip-debuginfoUpgrade php-debugsourceUpgrade php-dbgUpgrade php-odbcUpgrade libzip-debugsourceUpgrade php-dba-debuginfoUpgrade php-processUpgrade php-dbaUpgrade libzip-debuginfoUpgrade php-cli-debuginfoUpgrade php-gdUpgrade phpUpgrade php-pecl-apcu-debuginfoUpgrade php-intlUpgrade php-ldap-debuginfoUpgrade php-opcacheUpgrade php-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-process-debuginfoUpgrade libzip-develUpgrade php-bcmath-debuginfoUpgrade php-soap-debuginfoUpgrade php-xml-debuginfoUpgrade php-gmp-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pdo-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-soapUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcu-develUpgrade apcu-panelUpgrade php-embeddedUpgrade php-intl-debuginfoUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-json-debuginfoUpgrade php-pgsqlUpgrade php-opcache-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-snmp-debuginfo | Sep 9, 2020 | Nov 25, 2019 |
| Rocky_linux | — | Upgrade php-gdUpgrade php-cli-debuginfoUpgrade php-pdo-debuginfoUpgrade libzip-debugsourceUpgrade php-dbg-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mbstringUpgrade php-debuginfoUpgrade php-snmp-debuginfoUpgrade libzip-toolsUpgrade php-intl-debuginfoUpgrade php-intlUpgrade php-opcacheUpgrade php-pecl-rrdUpgrade libzip-develUpgrade php-xmlrpcUpgrade php-mysqlndUpgrade php-processUpgrade php-pecl-apcu-develUpgrade php-ldap-debuginfoUpgrade php-process-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-dbaUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-soapUpgrade php-soap-debuginfoUpgrade php-recodeUpgrade php-odbcUpgrade php-pecl-zip-debuginfoUpgrade php-embedded-debuginfoUpgrade php-cliUpgrade php-dbgUpgrade php-jsonUpgrade php-pecl-rrd-debugsourceUpgrade php-json-debuginfoUpgrade php-xml-debuginfoUpgrade php-snmpUpgrade php-pgsqlUpgrade php-pecl-apcu-debugsourceUpgrade libzip-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-dba-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debuginfoUpgrade php-debugsourceUpgrade php-pdoUpgrade php-bcmathUpgrade php-gmpUpgrade php-enchantUpgrade php-gmp-debuginfoUpgrade php-fpmUpgrade php-embeddedUpgrade phpUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-xmlrpc-debuginfoUpgrade php-xmlUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zipUpgrade php-odbc-debuginfoUpgrade php-fpm-debuginfoUpgrade php-common-debuginfoUpgrade php-commonUpgrade libzipUpgrade php-gd-debuginfoUpgrade php-ldapUpgrade php-recode-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-enchant-debuginfo | Mar 12, 2024 | Nov 25, 2019 |
| Suse | — | Upgrade libonig4Upgrade oniguruma-devel | Aug 9, 2024 | Nov 25, 2019 |
| Ubuntu | — | Upgrade libonig2 (Ubuntu Pro)Upgrade libonig4 (Ubuntu Pro) | Aug 18, 2020 | Nov 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub