A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libzipUpgrade php-jsonUpgrade php-xmlrpcUpgrade php-dbgUpgrade php-develUpgrade php-dbaUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-odbcUpgrade php-pecl-zipUpgrade php-pgsqlUpgrade php-gdUpgrade php-gmpUpgrade php-pearUpgrade php-bcmathUpgrade php-pecl-rrdUpgrade php-commonUpgrade php-mbstringUpgrade php-fpmUpgrade apcu-panelUpgrade php-processUpgrade onigurumaUpgrade libzip-develUpgrade oniguruma-develUpgrade php-recodeUpgrade php-embeddedUpgrade php-mysqlndUpgrade libzip-toolsUpgrade php-cliUpgrade php-pecl-apcuUpgrade php-snmpUpgrade php-enchantUpgrade phpUpgrade php-intlUpgrade php-opcacheUpgrade php-xmlUpgrade php-ldap | May 4, 2022 | Jul 10, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Jul 10, 2019 |
| Amazon Linux Ami 2 | — | Upgrade oniguruma-debuginfoUpgrade onigurumaUpgrade oniguruma-devel | Apr 27, 2020 | Jul 10, 2019 |
| Amazon_linux | — | Upgrade oniguruma | Oct 4, 2019 | Jul 10, 2019 |
| Centos_linux | — | Upgrade php-embedded-debuginfoUpgrade php-odbcUpgrade php-ldap-debuginfoUpgrade php-cli-debuginfoUpgrade phpUpgrade libzip-debugsourceUpgrade libzipUpgrade php-embeddedUpgrade php-gdUpgrade php-debuginfoUpgrade php-debugsourceUpgrade php-pgsqlUpgrade apcu-panelUpgrade libzip-tools-debuginfoUpgrade php-soap-debuginfoUpgrade php-commonUpgrade php-snmp-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-odbc-debuginfoUpgrade php-dba-debuginfoUpgrade oniguruma-debuginfoUpgrade php-ldapUpgrade php-pdo-debuginfoUpgrade php-dbgUpgrade php-pecl-apcu-develUpgrade libzip-develUpgrade php-json-debuginfoUpgrade php-fpm-debuginfoUpgrade php-gd-debuginfoUpgrade libzip-toolsUpgrade php-intlUpgrade php-pecl-xdebug-debugsourceUpgrade php-opcacheUpgrade php-bcmath-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pgsql-debuginfoUpgrade libzip-debuginfoUpgrade php-soapUpgrade php-pecl-apcu-debugsourceUpgrade php-process-debuginfoUpgrade php-dbaUpgrade php-xml-debuginfoUpgrade php-gmp-debuginfoUpgrade php-xmlUpgrade php-mysqlnd-debuginfoUpgrade php-pdoUpgrade php-enchantUpgrade php-pecl-zipUpgrade php-cliUpgrade oniguruma-debugsourceUpgrade php-jsonUpgrade onigurumaUpgrade php-recodeUpgrade php-gmpUpgrade php-pecl-xdebugUpgrade php-pearUpgrade php-fpmUpgrade php-pecl-rrdUpgrade php-enchant-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-common-debuginfoUpgrade php-mysqlndUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-recode-debuginfoUpgrade php-intl-debuginfoUpgrade php-snmpUpgrade php-dbg-debuginfoUpgrade php-bcmathUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-develUpgrade php-pecl-apcuUpgrade php-processUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrd-debuginfo | Sep 9, 2020 | Jul 10, 2019 |
| Debian | — | Upgrade libonig | Jul 30, 2024 | Jul 10, 2019 |
| Freebsd | — | Upgrade oniguruma | Sep 8, 2019 | Sep 7, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/oniguruma. | Nov 8, 2019 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade oniguruma | Sep 30, 2019 | Jul 10, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jul 10, 2019 |
| Oracle_linux | — | Upgrade php-fpmUpgrade php-jsonUpgrade php-xmlUpgrade php-pecl-xdebugUpgrade php-gmpUpgrade php-pdoUpgrade php-pearUpgrade php-soapUpgrade php-pecl-zipUpgrade php-commonUpgrade php-processUpgrade php-pecl-rrdUpgrade php-xmlrpcUpgrade php-mbstringUpgrade OVMFUpgrade php-pecl-apcu-develUpgrade onigurumaUpgrade php-develUpgrade phpUpgrade php-ldapUpgrade php-snmpUpgrade php-recodeUpgrade php-cliUpgrade php-bcmathUpgrade php-odbcUpgrade php-mysqlndUpgrade php-pgsqlUpgrade php-dbgUpgrade libzip-toolsUpgrade php-gdUpgrade php-opcacheUpgrade php-intlUpgrade php-enchantUpgrade oniguruma-develUpgrade libzip-develUpgrade php-pecl-apcuUpgrade apcu-panelUpgrade php-embeddedUpgrade AAVMFUpgrade libzipUpgrade php-dba | Sep 10, 2020 | Jun 27, 2019 |
| Redhat_linux | — | Upgrade php-odbc-debuginfoUpgrade php-commonUpgrade php-debuginfoUpgrade php-common-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pdo-debuginfoUpgrade php-cli-debuginfoUpgrade php-intlUpgrade php-jsonUpgrade php-pecl-xdebug-debugsourceUpgrade php-gmpUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-dbgUpgrade php-pgsqlUpgrade php-enchant-debuginfoUpgrade php-process-debuginfoUpgrade libzip-debuginfoUpgrade php-opcache-debuginfoUpgrade php-dba-debuginfoUpgrade php-xml-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pecl-apcuUpgrade php-odbcUpgrade php-ldapUpgrade php-pecl-apcu-debugsourceUpgrade php-cliUpgrade php-xmlrpc-debuginfoUpgrade php-processUpgrade libzip-debugsourceUpgrade php-snmp-debuginfoUpgrade php-gdUpgrade php-soap-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-dbaUpgrade php-gd-debuginfoUpgrade libzip-toolsUpgrade libzip-develUpgrade oniguruma-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-ldap-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pearUpgrade php-fpmUpgrade php-pecl-zipUpgrade php-pecl-xdebugUpgrade php-xmlUpgrade php-pecl-rrdUpgrade php-xmlrpcUpgrade php-enchantUpgrade onigurumaUpgrade php-soapUpgrade apcu-panelUpgrade php-pecl-rrd-debugsourceUpgrade php-gmp-debuginfoUpgrade php-opcacheUpgrade php-recode-debuginfoUpgrade php-debugsourceUpgrade php-pdoUpgrade oniguruma-debuginfoUpgrade libzipUpgrade php-mysqlndUpgrade phpUpgrade php-bcmathUpgrade php-pgsql-debuginfoUpgrade php-develUpgrade php-snmpUpgrade php-mbstringUpgrade oniguruma-develUpgrade php-dbg-debuginfoUpgrade php-embeddedUpgrade php-recodeUpgrade php-bcmath-debuginfo | Sep 9, 2020 | Jul 10, 2019 |
| Rocky_linux | — | Upgrade php-xml-debuginfoUpgrade php-gd-debuginfoUpgrade php-mbstring-debuginfoUpgrade oniguruma-develUpgrade php-pgsql-debuginfoUpgrade php-json-debuginfoUpgrade php-soap-debuginfoUpgrade php-pgsqlUpgrade php-mysqlndUpgrade php-pecl-zipUpgrade php-commonUpgrade php-common-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-odbcUpgrade php-cli-debuginfoUpgrade php-pecl-apcuUpgrade php-pdo-debuginfoUpgrade libzip-debuginfoUpgrade php-debugsourceUpgrade php-dba-debuginfoUpgrade php-gmp-debuginfoUpgrade phpUpgrade php-enchantUpgrade php-ldapUpgrade php-embeddedUpgrade php-pecl-zip-debuginfoUpgrade php-embedded-debuginfoUpgrade libzip-develUpgrade libzip-toolsUpgrade libzipUpgrade php-pdoUpgrade oniguruma-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebug-debuginfoUpgrade php-opcacheUpgrade php-dbgUpgrade php-bcmathUpgrade php-process-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-enchant-debuginfoUpgrade php-intlUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-xmlUpgrade php-processUpgrade php-gmpUpgrade php-recode-debuginfoUpgrade php-intl-debuginfoUpgrade php-cliUpgrade php-xmlrpcUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-rrdUpgrade php-dbg-debuginfoUpgrade php-soapUpgrade php-develUpgrade php-gdUpgrade php-pecl-apcu-debuginfoUpgrade php-odbc-debuginfoUpgrade oniguruma-debugsourceUpgrade php-dbaUpgrade php-pecl-zip-debugsourceUpgrade php-opcache-debuginfoUpgrade php-mbstringUpgrade php-snmpUpgrade php-jsonUpgrade php-fpmUpgrade php-recodeUpgrade libzip-tools-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade onigurumaUpgrade php-pecl-xdebug | Mar 12, 2024 | Jul 10, 2019 |
| Suse | — | Upgrade libonig4Upgrade oniguruma-devel | Aug 9, 2024 | Jul 10, 2019 |
| Ubuntu | — | Upgrade libonig | Nov 19, 2024 | Jul 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub