A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-soapUpgrade php-odbcUpgrade php-dbaUpgrade php-pecl-xdebugUpgrade php-pecl-rrdUpgrade php-xmlrpcUpgrade php-gmpUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-pearUpgrade php-jsonUpgrade php-pgsqlUpgrade php-fpmUpgrade php-mbstringUpgrade php-pdoUpgrade libzipUpgrade php-commonUpgrade php-bcmathUpgrade php-dbgUpgrade php-develUpgrade libzip-develUpgrade apcu-panelUpgrade php-pecl-apcuUpgrade php-enchantUpgrade php-opcacheUpgrade phpUpgrade php-intlUpgrade php-xmlUpgrade php-processUpgrade php-embeddedUpgrade onigurumaUpgrade oniguruma-develUpgrade php-mysqlndUpgrade libzip-toolsUpgrade php-recodeUpgrade php-ldapUpgrade php-snmpUpgrade php-cli | May 4, 2022 | Jul 10, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Jul 10, 2019 |
| Amazon Linux Ami 2 | — | Upgrade onigurumaUpgrade oniguruma-debuginfoUpgrade oniguruma-devel | Apr 27, 2020 | Jul 10, 2019 |
| Amazon_linux | — | Upgrade oniguruma | Oct 4, 2019 | Jul 10, 2019 |
| Centos_linux | — | Upgrade php-mbstringUpgrade php-xmlrpcUpgrade php-opcache-debuginfoUpgrade php-recodeUpgrade php-jsonUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-zipUpgrade php-mysqlnd-debuginfoUpgrade php-gmpUpgrade php-cliUpgrade php-pecl-xdebug-debuginfoUpgrade php-mysqlndUpgrade php-intl-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-recode-debuginfoUpgrade php-xmlUpgrade php-bcmathUpgrade php-pearUpgrade php-pdoUpgrade php-pecl-rrdUpgrade onigurumaUpgrade php-processUpgrade php-pecl-zip-debugsourceUpgrade php-snmpUpgrade php-enchantUpgrade php-develUpgrade php-common-debuginfoUpgrade oniguruma-debugsourceUpgrade php-fpmUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebugUpgrade libzipUpgrade php-gdUpgrade php-soap-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-xml-debuginfoUpgrade php-dbgUpgrade php-embeddedUpgrade php-embedded-debuginfoUpgrade php-json-debuginfoUpgrade php-dba-debuginfoUpgrade php-cli-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-mbstring-debuginfoUpgrade apcu-panelUpgrade php-odbc-debuginfoUpgrade php-pgsqlUpgrade php-fpm-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-gd-debuginfoUpgrade php-ldapUpgrade php-debuginfoUpgrade libzip-develUpgrade php-intlUpgrade libzip-toolsUpgrade libzip-debugsourceUpgrade php-pdo-debuginfoUpgrade libzip-debuginfoUpgrade php-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-snmp-debuginfoUpgrade php-commonUpgrade php-process-debuginfoUpgrade php-soapUpgrade oniguruma-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade php-gmp-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade php-odbcUpgrade php | Sep 9, 2020 | Jul 10, 2019 |
| Debian | — | Upgrade libonig | Jul 30, 2024 | Jul 10, 2019 |
| Freebsd | — | Upgrade oniguruma | Sep 8, 2019 | Sep 7, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/oniguruma. | Nov 8, 2019 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade oniguruma | Sep 30, 2019 | Jul 10, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jul 10, 2019 |
| Oracle_linux | — | Upgrade AAVMFUpgrade apcu-panelUpgrade php-pecl-apcuUpgrade libzipUpgrade php-gdUpgrade php-pgsqlUpgrade php-intlUpgrade phpUpgrade libzip-toolsUpgrade php-enchantUpgrade php-opcacheUpgrade php-dbgUpgrade libzip-develUpgrade php-embeddedUpgrade php-mysqlndUpgrade php-ldapUpgrade php-bcmathUpgrade oniguruma-develUpgrade php-dbaUpgrade php-recodeUpgrade php-snmpUpgrade php-odbcUpgrade php-cliUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-pdoUpgrade php-mbstringUpgrade php-pearUpgrade php-develUpgrade php-jsonUpgrade onigurumaUpgrade php-pecl-rrdUpgrade php-xmlUpgrade php-processUpgrade OVMFUpgrade php-soapUpgrade php-commonUpgrade php-xmlrpcUpgrade php-pecl-xdebugUpgrade php-pecl-zipUpgrade php-fpm | Sep 10, 2020 | Jun 27, 2019 |
| Redhat_linux | — | Upgrade php-mbstringUpgrade php-pdoUpgrade libzipUpgrade php-bcmath-debuginfoUpgrade php-soap-debuginfoUpgrade phpUpgrade php-mysqlndUpgrade php-fpmUpgrade php-embeddedUpgrade php-ldap-debuginfoUpgrade php-pecl-xdebugUpgrade oniguruma-develUpgrade php-pecl-rrdUpgrade oniguruma-debugsourceUpgrade php-pecl-zipUpgrade php-snmp-debuginfoUpgrade php-xmlrpcUpgrade php-enchantUpgrade php-gmp-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pearUpgrade libzip-tools-debuginfoUpgrade php-soapUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-dbg-debuginfoUpgrade php-debugsourceUpgrade php-gdUpgrade php-embedded-debuginfoUpgrade onigurumaUpgrade oniguruma-debuginfoUpgrade php-snmpUpgrade php-gd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-processUpgrade apcu-panelUpgrade php-develUpgrade php-recode-debuginfoUpgrade php-opcacheUpgrade php-cliUpgrade php-dbaUpgrade libzip-toolsUpgrade php-xmlUpgrade libzip-debugsourceUpgrade php-bcmathUpgrade libzip-develUpgrade php-intl-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-recodeUpgrade libzip-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcuUpgrade php-xml-debuginfoUpgrade php-opcache-debuginfoUpgrade php-dbgUpgrade php-enchant-debuginfoUpgrade php-process-debuginfoUpgrade php-ldapUpgrade php-pecl-zip-debugsourceUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-jsonUpgrade php-dba-debuginfoUpgrade php-common-debuginfoUpgrade php-intlUpgrade php-pecl-xdebug-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-cli-debuginfoUpgrade php-pdo-debuginfoUpgrade php-gmpUpgrade php-pgsqlUpgrade php-pecl-zip-debuginfoUpgrade php-odbcUpgrade php-json-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-apcu-develUpgrade php-common | Sep 9, 2020 | Jul 10, 2019 |
| Rocky_linux | — | Upgrade php-gd-debuginfoUpgrade php-intlUpgrade php-pgsqlUpgrade php-embedded-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-dba-debuginfoUpgrade php-debugsourceUpgrade php-gmp-debuginfoUpgrade oniguruma-debuginfoUpgrade php-ldapUpgrade php-pecl-xdebug-debuginfoUpgrade php-opcacheUpgrade libzipUpgrade php-odbcUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-json-debuginfoUpgrade libzip-debuginfoUpgrade php-pdoUpgrade php-mysqlndUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade libzip-toolsUpgrade php-pecl-zip-debuginfoUpgrade php-fpm-debuginfoUpgrade php-enchantUpgrade php-pecl-zipUpgrade libzip-develUpgrade php-dbgUpgrade php-pgsql-debuginfoUpgrade phpUpgrade oniguruma-develUpgrade php-common-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-commonUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-develUpgrade php-process-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-bcmathUpgrade php-pdo-debuginfoUpgrade php-pecl-apcuUpgrade php-embeddedUpgrade php-xml-debuginfoUpgrade php-soap-debuginfoUpgrade php-snmpUpgrade libzip-debugsourceUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-jsonUpgrade php-pecl-xdebugUpgrade php-gdUpgrade php-develUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade php-snmp-debuginfoUpgrade php-cliUpgrade php-recode-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-opcache-debuginfoUpgrade php-mbstringUpgrade php-dbaUpgrade php-xmlrpcUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-processUpgrade php-dbg-debuginfoUpgrade php-xmlUpgrade php-odbc-debuginfoUpgrade oniguruma-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-recodeUpgrade onigurumaUpgrade php-fpmUpgrade php-mysqlnd-debuginfoUpgrade php-gmp | Mar 12, 2024 | Jul 10, 2019 |
| Suse | — | Upgrade libonig4Upgrade oniguruma-devel | Aug 9, 2024 | Jul 10, 2019 |
| Ubuntu | — | Upgrade libonig | Nov 19, 2024 | Jul 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub