A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-opcacheUpgrade libzip-develUpgrade php-recodeUpgrade php-embeddedUpgrade php-cliUpgrade apcu-panelUpgrade phpUpgrade libzip-toolsUpgrade php-intlUpgrade php-snmpUpgrade php-ldapUpgrade oniguruma-develUpgrade onigurumaUpgrade php-enchantUpgrade php-xmlUpgrade php-processUpgrade php-mysqlndUpgrade php-pecl-apcuUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade libzipUpgrade php-pdoUpgrade php-jsonUpgrade php-develUpgrade php-mbstringUpgrade php-pecl-rrdUpgrade php-pearUpgrade php-pecl-xdebugUpgrade php-dbaUpgrade php-soapUpgrade php-odbcUpgrade php-fpmUpgrade php-dbgUpgrade php-xmlrpcUpgrade php-gmpUpgrade php-gdUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-common | May 4, 2022 | Jul 10, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Jul 10, 2019 |
| Amazon Linux Ami 2 | — | Upgrade onigurumaUpgrade oniguruma-debuginfoUpgrade oniguruma-devel | Apr 27, 2020 | Jul 10, 2019 |
| Amazon_linux | — | Upgrade oniguruma | Oct 4, 2019 | Jul 10, 2019 |
| Centos_linux | — | Upgrade php-pecl-xdebug-debugsourceUpgrade php-debugsourceUpgrade php-intlUpgrade php-cli-debuginfoUpgrade php-ldapUpgrade php-bcmath-debuginfoUpgrade php-dba-debuginfoUpgrade php-soap-debuginfoUpgrade php-soapUpgrade php-gd-debuginfoUpgrade php-embeddedUpgrade php-fpm-debuginfoUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade php-xml-debuginfoUpgrade php-odbcUpgrade libzip-toolsUpgrade libzip-tools-debuginfoUpgrade php-dbgUpgrade php-embedded-debuginfoUpgrade php-dbaUpgrade php-gmp-debuginfoUpgrade php-pgsqlUpgrade libzipUpgrade php-pecl-apcu-develUpgrade apcu-panelUpgrade libzip-debugsourceUpgrade phpUpgrade php-pdo-debuginfoUpgrade php-gdUpgrade php-pecl-zip-debuginfoUpgrade libzip-develUpgrade php-snmp-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-commonUpgrade libzip-debuginfoUpgrade php-odbc-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade oniguruma-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-process-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-jsonUpgrade php-pdoUpgrade php-processUpgrade php-snmpUpgrade php-xmlUpgrade php-dbg-debuginfoUpgrade php-bcmathUpgrade php-xmlrpcUpgrade php-pecl-zipUpgrade php-pecl-rrd-debuginfoUpgrade php-recodeUpgrade php-opcache-debuginfoUpgrade php-pecl-rrdUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-mysqlndUpgrade php-intl-debuginfoUpgrade php-common-debuginfoUpgrade php-recode-debuginfoUpgrade onigurumaUpgrade php-enchantUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade oniguruma-debugsourceUpgrade php-pecl-apcuUpgrade php-mbstringUpgrade php-develUpgrade php-xmlrpc-debuginfoUpgrade php-gmpUpgrade php-pecl-apcu-debuginfoUpgrade php-pearUpgrade php-mysqlnd-debuginfoUpgrade php-cli | Sep 9, 2020 | Jul 10, 2019 |
| Debian | — | Upgrade libonig | Jul 30, 2024 | Jul 10, 2019 |
| Freebsd | — | Upgrade oniguruma | Sep 8, 2019 | Sep 7, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/oniguruma. | Nov 8, 2019 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade oniguruma | Sep 30, 2019 | Jul 10, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jul 10, 2019 |
| Oracle_linux | — | Upgrade php-gmpUpgrade php-xmlrpcUpgrade php-develUpgrade OVMFUpgrade php-commonUpgrade onigurumaUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade php-fpmUpgrade php-pearUpgrade php-soapUpgrade php-processUpgrade php-pecl-xdebugUpgrade php-jsonUpgrade php-xmlUpgrade php-mbstringUpgrade php-pecl-rrdUpgrade php-pecl-zipUpgrade php-dbgUpgrade libzip-toolsUpgrade phpUpgrade php-intlUpgrade php-embeddedUpgrade php-mysqlndUpgrade libzip-develUpgrade php-opcacheUpgrade php-cliUpgrade php-bcmathUpgrade php-ldapUpgrade php-dbaUpgrade php-recodeUpgrade php-odbcUpgrade php-enchantUpgrade php-gdUpgrade php-pgsqlUpgrade php-snmpUpgrade libzipUpgrade php-pecl-apcuUpgrade AAVMFUpgrade apcu-panelUpgrade oniguruma-devel | Sep 10, 2020 | Jun 27, 2019 |
| Redhat_linux | — | Upgrade oniguruma-develUpgrade php-snmpUpgrade libzipUpgrade php-pdoUpgrade php-soap-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pearUpgrade php-enchantUpgrade onigurumaUpgrade php-xmlrpcUpgrade php-recodeUpgrade php-gd-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzip-debugsourceUpgrade apcu-panelUpgrade php-fpmUpgrade php-dbg-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlUpgrade php-embedded-debuginfoUpgrade php-processUpgrade php-intl-debuginfoUpgrade php-dbaUpgrade libzip-toolsUpgrade php-opcacheUpgrade php-snmp-debuginfoUpgrade php-bcmath-debuginfoUpgrade phpUpgrade php-embeddedUpgrade php-mysqlndUpgrade php-debugsourceUpgrade php-soapUpgrade oniguruma-debuginfoUpgrade php-mbstringUpgrade php-ldap-debuginfoUpgrade libzip-develUpgrade php-cliUpgrade libzip-tools-debuginfoUpgrade php-gdUpgrade oniguruma-debugsourceUpgrade php-develUpgrade php-pgsql-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-bcmathUpgrade php-pecl-rrdUpgrade php-pecl-zipUpgrade php-gmp-debuginfoUpgrade php-pecl-xdebugUpgrade php-odbcUpgrade php-pecl-zip-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcu-debugsourceUpgrade php-pdo-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-apcu-develUpgrade php-json-debuginfoUpgrade php-debuginfoUpgrade php-intlUpgrade php-dba-debuginfoUpgrade php-jsonUpgrade php-odbc-debuginfoUpgrade php-pecl-apcuUpgrade php-fpm-debuginfoUpgrade php-enchant-debuginfoUpgrade libzip-debuginfoUpgrade php-xml-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-cli-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-process-debuginfoUpgrade php-dbgUpgrade php-opcache-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-ldapUpgrade php-gmpUpgrade php-pecl-xdebug-debuginfoUpgrade php-commonUpgrade php-pecl-xdebug-debugsource | Sep 9, 2020 | Jul 10, 2019 |
| Rocky_linux | — | Upgrade oniguruma-develUpgrade php-pgsql-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pdo-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-dbgUpgrade php-commonUpgrade php-pecl-zipUpgrade php-soap-debuginfoUpgrade php-mysqlndUpgrade php-common-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-apcuUpgrade php-embeddedUpgrade phpUpgrade php-cli-debuginfoUpgrade php-odbcUpgrade libzip-debuginfoUpgrade php-dba-debuginfoUpgrade php-debugsourceUpgrade php-gmp-debuginfoUpgrade php-ldapUpgrade libzip-develUpgrade php-xmlrpc-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcu-develUpgrade php-enchantUpgrade php-process-debuginfoUpgrade php-enchant-debuginfoUpgrade php-embedded-debuginfoUpgrade php-opcacheUpgrade php-fpm-debuginfoUpgrade php-intlUpgrade libzipUpgrade libzip-toolsUpgrade php-pecl-xdebug-debugsourceUpgrade oniguruma-debuginfoUpgrade php-pdoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-snmpUpgrade php-pecl-xdebugUpgrade php-mysqlnd-debuginfoUpgrade oniguruma-debugsourceUpgrade php-xmlUpgrade php-pecl-rrdUpgrade php-cliUpgrade php-jsonUpgrade php-recode-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-gmpUpgrade php-snmp-debuginfoUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade php-dbaUpgrade libzip-tools-debuginfoUpgrade php-processUpgrade php-fpmUpgrade onigurumaUpgrade php-recodeUpgrade php-gdUpgrade php-pecl-zip-debugsourceUpgrade php-develUpgrade libzip-debugsourceUpgrade php-xmlrpcUpgrade php-soapUpgrade php-odbc-debuginfoUpgrade php-mbstringUpgrade php-opcache-debuginfoUpgrade php-intl-debuginfo | Mar 12, 2024 | Jul 10, 2019 |
| Suse | — | Upgrade libonig4Upgrade oniguruma-devel | Aug 9, 2024 | Jul 10, 2019 |
| Ubuntu | — | Upgrade libonig | Nov 19, 2024 | Jul 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub