A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libzip-toolsUpgrade php-snmpUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-pecl-apcuUpgrade php-ldapUpgrade php-cliUpgrade onigurumaUpgrade libzip-develUpgrade php-embeddedUpgrade php-recodeUpgrade php-xmlUpgrade php-enchantUpgrade oniguruma-develUpgrade phpUpgrade php-intlUpgrade php-processUpgrade apcu-panelUpgrade php-pearUpgrade php-pecl-xdebugUpgrade libzipUpgrade php-pecl-zipUpgrade php-jsonUpgrade php-commonUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-soapUpgrade php-odbcUpgrade php-pecl-rrdUpgrade php-mbstringUpgrade php-bcmathUpgrade php-develUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade php-fpmUpgrade php-dbgUpgrade php-pdoUpgrade php-gmpUpgrade php-gd | May 4, 2022 | Jul 10, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Jul 10, 2019 |
| Amazon Linux Ami 2 | — | Upgrade oniguruma-develUpgrade onigurumaUpgrade oniguruma-debuginfo | Apr 27, 2020 | Jul 10, 2019 |
| Amazon_linux | — | Upgrade oniguruma | Oct 4, 2019 | Jul 10, 2019 |
| Centos_linux | — | Upgrade php-recodeUpgrade php-pecl-zipUpgrade php-jsonUpgrade php-enchantUpgrade php-pecl-rrd-debuginfoUpgrade onigurumaUpgrade php-opcache-debuginfoUpgrade php-cliUpgrade php-pearUpgrade php-pecl-zip-debugsourceUpgrade php-xmlUpgrade php-mysqlnd-debuginfoUpgrade php-mbstringUpgrade php-common-debuginfoUpgrade php-xmlrpcUpgrade php-gmpUpgrade php-pecl-xdebug-debuginfoUpgrade php-fpmUpgrade php-recode-debuginfoUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade php-enchant-debuginfoUpgrade php-mysqlndUpgrade php-pecl-apcuUpgrade php-dbg-debuginfoUpgrade php-intl-debuginfoUpgrade php-processUpgrade php-pecl-apcu-debuginfoUpgrade php-bcmathUpgrade oniguruma-debugsourceUpgrade php-snmpUpgrade php-pecl-rrdUpgrade php-xmlrpc-debuginfoUpgrade php-develUpgrade php-odbc-debuginfoUpgrade apcu-panelUpgrade php-pecl-rrd-debugsourceUpgrade php-ldapUpgrade php-soap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade libzip-develUpgrade php-opcacheUpgrade php-debugsourceUpgrade php-commonUpgrade oniguruma-debuginfoUpgrade php-intlUpgrade php-pdo-debuginfoUpgrade php-dba-debuginfoUpgrade php-soapUpgrade php-embedded-debuginfoUpgrade php-cli-debuginfoUpgrade php-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-dbgUpgrade php-pecl-apcu-develUpgrade php-process-debuginfoUpgrade php-gdUpgrade libzipUpgrade php-pgsqlUpgrade phpUpgrade php-pgsql-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-debugsourceUpgrade libzip-debuginfoUpgrade php-embeddedUpgrade php-bcmath-debuginfoUpgrade php-gmp-debuginfoUpgrade php-json-debuginfoUpgrade php-dbaUpgrade php-gd-debuginfoUpgrade php-odbcUpgrade php-fpm-debuginfoUpgrade libzip-toolsUpgrade php-pecl-xdebug-debugsource | Sep 9, 2020 | Jul 10, 2019 |
| Debian | — | Upgrade libonig | Jul 30, 2024 | Jul 10, 2019 |
| Freebsd | — | Upgrade oniguruma | Sep 8, 2019 | Sep 7, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/oniguruma. | Nov 8, 2019 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade oniguruma | Sep 30, 2019 | Jul 10, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jul 10, 2019 |
| Oracle_linux | — | Upgrade libzip-develUpgrade php-snmpUpgrade php-pecl-apcuUpgrade php-embeddedUpgrade libzipUpgrade php-enchantUpgrade php-pgsqlUpgrade php-cliUpgrade php-dbaUpgrade php-mysqlndUpgrade AAVMFUpgrade php-intlUpgrade apcu-panelUpgrade phpUpgrade php-dbgUpgrade php-gdUpgrade libzip-toolsUpgrade php-opcacheUpgrade oniguruma-develUpgrade php-odbcUpgrade php-ldapUpgrade php-bcmathUpgrade php-recodeUpgrade php-commonUpgrade php-gmpUpgrade php-mbstringUpgrade php-pecl-zipUpgrade php-processUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-fpmUpgrade php-pdoUpgrade php-develUpgrade php-pearUpgrade php-pecl-xdebugUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-jsonUpgrade onigurumaUpgrade php-soapUpgrade OVMF | Sep 10, 2020 | Jun 27, 2019 |
| Redhat_linux | — | Upgrade php-pecl-xdebug-debugsourceUpgrade php-commonUpgrade php-enchant-debuginfoUpgrade php-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-fpm-debuginfoUpgrade php-common-debuginfoUpgrade php-process-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade libzip-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-dba-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-xml-debuginfoUpgrade php-pecl-apcuUpgrade php-odbc-debuginfoUpgrade php-ldapUpgrade php-opcache-debuginfoUpgrade php-odbcUpgrade php-pgsqlUpgrade php-intlUpgrade php-dbgUpgrade php-jsonUpgrade php-gmpUpgrade php-pdo-debuginfoUpgrade php-pecl-apcu-develUpgrade oniguruma-debugsourceUpgrade php-pecl-rrdUpgrade php-pecl-xdebugUpgrade php-pecl-zipUpgrade php-opcacheUpgrade php-recode-debuginfoUpgrade apcu-panelUpgrade libzip-debugsourceUpgrade php-snmpUpgrade php-gmp-debuginfoUpgrade php-bcmathUpgrade libzip-tools-debuginfoUpgrade php-soap-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzip-toolsUpgrade php-dbg-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-mbstringUpgrade libzip-develUpgrade php-fpmUpgrade php-cliUpgrade php-pearUpgrade php-embedded-debuginfoUpgrade onigurumaUpgrade php-soapUpgrade php-xmlrpcUpgrade php-recodeUpgrade oniguruma-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-gd-debuginfoUpgrade php-gdUpgrade libzipUpgrade php-snmp-debuginfoUpgrade php-dbaUpgrade php-intl-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade phpUpgrade php-develUpgrade oniguruma-develUpgrade php-debugsourceUpgrade php-enchantUpgrade php-xmlUpgrade php-processUpgrade php-mysqlndUpgrade php-pdoUpgrade php-embedded | Sep 9, 2020 | Jul 10, 2019 |
| Rocky_linux | — | Upgrade php-xmlrpcUpgrade libzip-debugsourceUpgrade php-jsonUpgrade php-pecl-zip-debugsourceUpgrade php-snmpUpgrade php-dbaUpgrade php-intl-debuginfoUpgrade php-mbstringUpgrade php-xmlUpgrade php-odbc-debuginfoUpgrade oniguruma-debugsourceUpgrade php-opcache-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-snmp-debuginfoUpgrade php-gmpUpgrade php-mysqlnd-debuginfoUpgrade php-debuginfoUpgrade php-ldap-debuginfoUpgrade php-develUpgrade php-recodeUpgrade onigurumaUpgrade php-processUpgrade php-fpmUpgrade php-cliUpgrade php-pecl-rrdUpgrade libzip-tools-debuginfoUpgrade php-pecl-xdebugUpgrade php-soapUpgrade php-dbg-debuginfoUpgrade php-gdUpgrade php-pecl-apcuUpgrade phpUpgrade php-enchantUpgrade php-bcmathUpgrade php-xmlrpc-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-cli-debuginfoUpgrade php-json-debuginfoUpgrade php-xml-debuginfoUpgrade php-soap-debuginfoUpgrade oniguruma-develUpgrade php-pdoUpgrade oniguruma-debuginfoUpgrade libzipUpgrade php-mysqlndUpgrade php-fpm-debuginfoUpgrade php-enchant-debuginfoUpgrade php-dbgUpgrade php-pecl-xdebug-debuginfoUpgrade php-opcacheUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebug-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-commonUpgrade php-pecl-zipUpgrade php-common-debuginfoUpgrade php-gmp-debuginfoUpgrade php-debugsourceUpgrade php-dba-debuginfoUpgrade libzip-debuginfoUpgrade php-odbcUpgrade libzip-toolsUpgrade libzip-develUpgrade php-embeddedUpgrade php-bcmath-debuginfoUpgrade php-pdo-debuginfoUpgrade php-ldapUpgrade php-pgsqlUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-intlUpgrade php-gd-debuginfoUpgrade php-embedded-debuginfo | Mar 12, 2024 | Jul 10, 2019 |
| Suse | — | Upgrade oniguruma-develUpgrade libonig4 | Aug 9, 2024 | Jul 10, 2019 |
| Ubuntu | — | Upgrade libonig | Nov 19, 2024 | Jul 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub