A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-processUpgrade php-intlUpgrade php-recodeUpgrade php-embeddedUpgrade phpUpgrade php-xmlUpgrade apcu-panelUpgrade onigurumaUpgrade php-ldapUpgrade libzip-develUpgrade php-snmpUpgrade php-opcacheUpgrade php-cliUpgrade php-pecl-apcuUpgrade php-mysqlndUpgrade php-enchantUpgrade libzip-toolsUpgrade oniguruma-develUpgrade php-fpmUpgrade php-gdUpgrade php-pecl-xdebugUpgrade php-dbaUpgrade libzipUpgrade php-pecl-apcu-develUpgrade php-pecl-rrdUpgrade php-bcmathUpgrade php-mbstringUpgrade php-soapUpgrade php-jsonUpgrade php-pgsqlUpgrade php-dbgUpgrade php-develUpgrade php-commonUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-pearUpgrade php-gmpUpgrade php-pecl-zip | May 4, 2022 | Jul 10, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Jul 10, 2019 |
| Amazon Linux Ami 2 | — | Upgrade oniguruma-develUpgrade onigurumaUpgrade oniguruma-debuginfo | Apr 27, 2020 | Jul 10, 2019 |
| Amazon_linux | — | Upgrade oniguruma | Oct 4, 2019 | Jul 10, 2019 |
| Centos_linux | — | Upgrade php-dbgUpgrade php-odbc-debuginfoUpgrade php-gdUpgrade php-pgsql-debuginfoUpgrade libzip-toolsUpgrade php-pgsqlUpgrade php-cli-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-xml-debuginfoUpgrade apcu-panelUpgrade php-embeddedUpgrade php-odbcUpgrade php-dba-debuginfoUpgrade php-gmp-debuginfoUpgrade php-soapUpgrade php-ldapUpgrade php-dbaUpgrade libzip-tools-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade libzipUpgrade php-json-debuginfoUpgrade php-opcacheUpgrade php-gd-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade phpUpgrade php-intlUpgrade php-fpm-debuginfoUpgrade libzip-develUpgrade libzip-debuginfoUpgrade php-pdo-debuginfoUpgrade php-mbstring-debuginfoUpgrade libzip-debugsourceUpgrade php-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-apcu-develUpgrade php-debugsourceUpgrade php-snmp-debuginfoUpgrade php-commonUpgrade php-soap-debuginfoUpgrade php-process-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade oniguruma-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pdoUpgrade php-develUpgrade php-common-debuginfoUpgrade php-cliUpgrade php-intl-debuginfoUpgrade onigurumaUpgrade php-xmlrpcUpgrade php-recodeUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zipUpgrade php-pearUpgrade php-pecl-rrdUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-pecl-rrd-debuginfoUpgrade php-enchantUpgrade php-gmpUpgrade oniguruma-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlndUpgrade php-jsonUpgrade php-pecl-xdebug-debuginfoUpgrade php-recode-debuginfoUpgrade php-mbstringUpgrade php-dbg-debuginfoUpgrade php-snmpUpgrade php-pecl-apcuUpgrade php-processUpgrade php-xmlrpc-debuginfoUpgrade php-bcmathUpgrade php-xml | Sep 9, 2020 | Jul 10, 2019 |
| Debian | — | Upgrade libonig | Jul 30, 2024 | Jul 10, 2019 |
| Freebsd | — | Upgrade oniguruma | Sep 8, 2019 | Sep 7, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/oniguruma. | Nov 8, 2019 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade oniguruma | Sep 30, 2019 | Jul 10, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jul 10, 2019 |
| Oracle_linux | — | Upgrade php-pecl-zipUpgrade php-mbstringUpgrade php-gmpUpgrade php-pdoUpgrade php-pearUpgrade php-pecl-apcu-develUpgrade php-processUpgrade php-fpmUpgrade php-develUpgrade OVMFUpgrade php-commonUpgrade php-soapUpgrade onigurumaUpgrade php-xmlUpgrade php-pecl-rrdUpgrade php-xmlrpcUpgrade php-jsonUpgrade php-pecl-xdebugUpgrade php-cliUpgrade libzip-develUpgrade libzipUpgrade php-enchantUpgrade php-bcmathUpgrade php-pgsqlUpgrade php-recodeUpgrade php-dbaUpgrade php-ldapUpgrade php-embeddedUpgrade php-odbcUpgrade php-intlUpgrade phpUpgrade libzip-toolsUpgrade php-opcacheUpgrade php-pecl-apcuUpgrade php-gdUpgrade php-mysqlndUpgrade php-dbgUpgrade oniguruma-develUpgrade apcu-panelUpgrade php-snmpUpgrade AAVMF | Sep 10, 2020 | Jun 27, 2019 |
| Redhat_linux | — | Upgrade php-pearUpgrade onigurumaUpgrade php-enchantUpgrade php-dbg-debuginfoUpgrade php-fpmUpgrade php-snmpUpgrade php-pecl-rrd-debugsourceUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-embedded-debuginfoUpgrade php-mbstringUpgrade php-pecl-rrdUpgrade libzip-debugsourceUpgrade oniguruma-debugsourceUpgrade oniguruma-develUpgrade php-pecl-xdebugUpgrade libzip-tools-debuginfoUpgrade php-pecl-zipUpgrade php-xmlrpc-debuginfoUpgrade php-develUpgrade php-pgsql-debuginfoUpgrade libzipUpgrade php-xmlUpgrade apcu-panelUpgrade php-gdUpgrade php-pdoUpgrade php-cliUpgrade php-opcacheUpgrade php-bcmathUpgrade php-gd-debuginfoUpgrade php-dbaUpgrade php-gmp-debuginfoUpgrade php-intl-debuginfoUpgrade php-processUpgrade php-soap-debuginfoUpgrade libzip-develUpgrade php-snmp-debuginfoUpgrade phpUpgrade php-xmlrpcUpgrade oniguruma-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-embeddedUpgrade php-soapUpgrade php-recode-debuginfoUpgrade php-debugsourceUpgrade php-recodeUpgrade php-xml-debuginfoUpgrade php-process-debuginfoUpgrade php-odbcUpgrade php-pgsqlUpgrade php-ldapUpgrade php-pecl-apcu-debugsourceUpgrade php-enchant-debuginfoUpgrade php-odbc-debuginfoUpgrade php-debuginfoUpgrade php-jsonUpgrade libzip-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-dba-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dbgUpgrade php-pecl-xdebug-debuginfoUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-opcache-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-gmpUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-develUpgrade php-intlUpgrade php-mysqlnd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-common-debuginfoUpgrade php-json-debuginfo | Sep 9, 2020 | Jul 10, 2019 |
| Rocky_linux | — | Upgrade php-mysqlnd-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-processUpgrade php-pecl-rrd-debuginfoUpgrade php-recode-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-snmp-debuginfoUpgrade php-recodeUpgrade php-odbc-debuginfoUpgrade php-develUpgrade php-debuginfoUpgrade php-gdUpgrade libzip-debugsourceUpgrade php-jsonUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebugUpgrade php-cliUpgrade php-pecl-rrdUpgrade php-dbg-debuginfoUpgrade php-soapUpgrade php-snmpUpgrade php-gmpUpgrade php-opcache-debuginfoUpgrade onigurumaUpgrade php-mbstringUpgrade php-fpmUpgrade php-intl-debuginfoUpgrade php-dbaUpgrade oniguruma-debugsourceUpgrade php-xmlUpgrade php-xmlrpcUpgrade libzip-toolsUpgrade php-process-debuginfoUpgrade libzipUpgrade php-mbstring-debuginfoUpgrade libzip-debuginfoUpgrade php-gd-debuginfoUpgrade php-embedded-debuginfoUpgrade php-intlUpgrade php-pecl-apcu-debugsourceUpgrade php-pdoUpgrade oniguruma-debuginfoUpgrade php-xml-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-apcuUpgrade php-json-debuginfoUpgrade php-bcmath-debuginfoUpgrade oniguruma-develUpgrade php-bcmathUpgrade php-commonUpgrade php-embeddedUpgrade libzip-develUpgrade php-pecl-zipUpgrade php-pecl-xdebug-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pgsqlUpgrade php-enchantUpgrade phpUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-develUpgrade php-opcacheUpgrade php-pecl-xdebug-debuginfoUpgrade php-mysqlndUpgrade php-fpm-debuginfoUpgrade php-enchant-debuginfoUpgrade php-dbgUpgrade php-odbcUpgrade php-ldapUpgrade php-gmp-debuginfoUpgrade php-dba-debuginfoUpgrade php-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-common-debuginfoUpgrade php-pdo-debuginfo | Mar 12, 2024 | Jul 10, 2019 |
| Suse | — | Upgrade libonig4Upgrade oniguruma-devel | Aug 9, 2024 | Jul 10, 2019 |
| Ubuntu | — | Upgrade libonig | Nov 19, 2024 | Jul 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub