A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-cliUpgrade phpUpgrade php-pecl-apcuUpgrade php-enchantUpgrade php-intlUpgrade php-processUpgrade libzip-develUpgrade php-recodeUpgrade php-embeddedUpgrade php-ldapUpgrade libzip-toolsUpgrade php-opcacheUpgrade oniguruma-develUpgrade onigurumaUpgrade php-mysqlndUpgrade apcu-panelUpgrade php-snmpUpgrade php-xmlUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-commonUpgrade php-pearUpgrade libzipUpgrade php-mbstringUpgrade php-gmpUpgrade php-dbaUpgrade php-gdUpgrade php-pecl-rrdUpgrade php-jsonUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade php-bcmathUpgrade php-pecl-zipUpgrade php-pgsqlUpgrade php-fpmUpgrade php-develUpgrade php-dbg | May 4, 2022 | Jul 10, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Jul 10, 2019 |
| Amazon Linux Ami 2 | — | Upgrade oniguruma-develUpgrade oniguruma-debuginfoUpgrade oniguruma | Apr 27, 2020 | Jul 10, 2019 |
| Amazon_linux | — | Upgrade oniguruma | Oct 4, 2019 | Jul 10, 2019 |
| Centos_linux | — | Upgrade php-bcmathUpgrade php-jsonUpgrade php-xmlUpgrade php-processUpgrade php-develUpgrade php-xmlrpcUpgrade php-pecl-rrd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-snmpUpgrade php-mysqlnd-debuginfoUpgrade php-cliUpgrade php-pearUpgrade php-pecl-zipUpgrade php-recode-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcuUpgrade php-mbstringUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-common-debuginfoUpgrade php-recodeUpgrade oniguruma-debugsourceUpgrade onigurumaUpgrade php-mysqlndUpgrade php-opcache-debuginfoUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-enchant-debuginfoUpgrade php-pecl-rrdUpgrade php-gmpUpgrade php-xmlrpc-debuginfoUpgrade php-pdoUpgrade php-enchantUpgrade php-pecl-zip-debugsourceUpgrade php-opcacheUpgrade php-intlUpgrade php-pecl-xdebug-debugsourceUpgrade php-gdUpgrade libzipUpgrade apcu-panelUpgrade php-odbc-debuginfoUpgrade php-embedded-debuginfoUpgrade php-xml-debuginfoUpgrade php-dbgUpgrade php-soapUpgrade php-pgsql-debuginfoUpgrade php-fpm-debuginfoUpgrade php-gd-debuginfoUpgrade libzip-develUpgrade php-pecl-rrd-debugsourceUpgrade php-json-debuginfoUpgrade phpUpgrade php-pecl-apcu-develUpgrade php-pdo-debuginfoUpgrade libzip-debugsourceUpgrade libzip-debuginfoUpgrade php-dba-debuginfoUpgrade php-process-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-debuginfoUpgrade oniguruma-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-embeddedUpgrade php-commonUpgrade php-ldap-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-soap-debuginfoUpgrade php-debugsourceUpgrade php-snmp-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-cli-debuginfoUpgrade php-pgsqlUpgrade php-ldapUpgrade php-dbaUpgrade php-odbcUpgrade libzip-toolsUpgrade php-bcmath-debuginfoUpgrade php-gmp-debuginfo | Sep 9, 2020 | Jul 10, 2019 |
| Debian | — | Upgrade libonig | Jul 30, 2024 | Jul 10, 2019 |
| Freebsd | — | Upgrade oniguruma | Sep 8, 2019 | Sep 7, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/oniguruma. | Nov 8, 2019 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade oniguruma | Sep 30, 2019 | Jul 10, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jul 10, 2019 |
| Oracle_linux | — | Upgrade php-jsonUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-mbstringUpgrade php-gmpUpgrade php-pearUpgrade php-fpmUpgrade onigurumaUpgrade php-processUpgrade OVMFUpgrade php-commonUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-xmlUpgrade php-pecl-xdebugUpgrade php-develUpgrade libzip-develUpgrade php-pgsqlUpgrade php-recodeUpgrade php-opcacheUpgrade php-bcmathUpgrade php-odbcUpgrade php-cliUpgrade php-ldapUpgrade php-dbaUpgrade libzip-toolsUpgrade php-gdUpgrade oniguruma-develUpgrade php-embeddedUpgrade php-intlUpgrade phpUpgrade php-dbgUpgrade libzipUpgrade php-pecl-apcuUpgrade php-snmpUpgrade php-enchantUpgrade apcu-panelUpgrade AAVMFUpgrade php-mysqlnd | Sep 10, 2020 | Jun 27, 2019 |
| Redhat_linux | — | Upgrade php-dba-debuginfoUpgrade php-opcache-debuginfoUpgrade php-odbcUpgrade php-xml-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dbgUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-ldapUpgrade php-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-jsonUpgrade php-gmpUpgrade php-commonUpgrade libzip-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-odbc-debuginfoUpgrade php-pecl-apcuUpgrade php-mbstring-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-apcu-develUpgrade php-mysqlnd-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pgsqlUpgrade php-common-debuginfoUpgrade php-intlUpgrade php-cli-debuginfoUpgrade php-json-debuginfoUpgrade php-process-debuginfoUpgrade php-pearUpgrade libzip-develUpgrade php-pecl-apcu-debuginfoUpgrade php-dbg-debuginfoUpgrade php-ldap-debuginfoUpgrade libzip-toolsUpgrade php-debugsourceUpgrade php-recode-debuginfoUpgrade php-soap-debuginfoUpgrade php-cliUpgrade php-intl-debuginfoUpgrade php-processUpgrade php-embeddedUpgrade php-recodeUpgrade php-opcacheUpgrade php-gd-debuginfoUpgrade php-bcmathUpgrade php-enchantUpgrade php-xmlrpcUpgrade php-pecl-rrd-debugsourceUpgrade php-soapUpgrade onigurumaUpgrade libzip-tools-debuginfoUpgrade php-pecl-rrdUpgrade php-embedded-debuginfoUpgrade php-dbaUpgrade php-pgsql-debuginfoUpgrade php-gmp-debuginfoUpgrade libzip-debugsourceUpgrade apcu-panelUpgrade php-pecl-rrd-debuginfoUpgrade php-snmpUpgrade oniguruma-debuginfoUpgrade libzipUpgrade phpUpgrade php-pdoUpgrade oniguruma-develUpgrade php-mbstringUpgrade php-mysqlndUpgrade php-pecl-zipUpgrade oniguruma-debugsourceUpgrade php-pecl-xdebugUpgrade php-gdUpgrade php-xmlrpc-debuginfoUpgrade php-xmlUpgrade php-fpmUpgrade php-develUpgrade php-snmp-debuginfoUpgrade php-bcmath-debuginfo | Sep 9, 2020 | Jul 10, 2019 |
| Rocky_linux | — | Upgrade php-odbc-debuginfoUpgrade php-cliUpgrade php-opcache-debuginfoUpgrade php-dbg-debuginfoUpgrade php-soapUpgrade php-intl-debuginfoUpgrade php-ldap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-rrdUpgrade php-mbstringUpgrade php-pecl-zip-debugsourceUpgrade php-debuginfoUpgrade php-gmpUpgrade php-fpmUpgrade php-recodeUpgrade libzip-tools-debuginfoUpgrade php-processUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlUpgrade php-pecl-rrd-debuginfoUpgrade onigurumaUpgrade php-snmpUpgrade php-recode-debuginfoUpgrade oniguruma-debugsourceUpgrade php-dbaUpgrade php-mysqlnd-debuginfoUpgrade php-jsonUpgrade php-develUpgrade libzip-debugsourceUpgrade php-gdUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade php-embeddedUpgrade php-commonUpgrade php-mysqlndUpgrade oniguruma-debuginfoUpgrade php-cli-debuginfoUpgrade phpUpgrade php-enchantUpgrade php-pecl-apcuUpgrade php-pecl-rrd-debugsourceUpgrade php-pgsqlUpgrade php-xmlrpc-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-intlUpgrade php-gd-debuginfoUpgrade php-embedded-debuginfoUpgrade php-bcmathUpgrade libzip-toolsUpgrade libzip-debuginfoUpgrade php-debugsourceUpgrade php-odbcUpgrade php-gmp-debuginfoUpgrade php-dba-debuginfoUpgrade libzip-develUpgrade php-ldapUpgrade php-pecl-xdebug-debugsourceUpgrade libzipUpgrade php-pgsql-debuginfoUpgrade php-xml-debuginfoUpgrade php-soap-debuginfoUpgrade php-json-debuginfoUpgrade php-opcacheUpgrade php-dbgUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcu-develUpgrade php-enchant-debuginfoUpgrade php-pdo-debuginfoUpgrade php-common-debuginfoUpgrade php-bcmath-debuginfoUpgrade oniguruma-develUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-zip | Mar 12, 2024 | Jul 10, 2019 |
| Suse | — | Upgrade oniguruma-develUpgrade libonig4 | Aug 9, 2024 | Jul 10, 2019 |
| Ubuntu | — | Upgrade libonig | Nov 19, 2024 | Jul 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub