Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-jsonUpgrade php-pecl-rrdUpgrade php-mbstringUpgrade php-pdoUpgrade php-commonUpgrade php-processUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-develUpgrade php-pearUpgrade php-odbcUpgrade onigurumaUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-soapUpgrade php-embeddedUpgrade phpUpgrade libzipUpgrade php-enchantUpgrade php-gdUpgrade php-intlUpgrade php-snmpUpgrade libzip-toolsUpgrade php-dbgUpgrade oniguruma-develUpgrade php-pecl-zipUpgrade php-opcacheUpgrade php-ldapUpgrade apcu-panelUpgrade php-pecl-apcuUpgrade libzip-develUpgrade php-xmlUpgrade php-mysqlndUpgrade php-recodeUpgrade php-bcmathUpgrade php-dbaUpgrade php-cli | May 4, 2022 | Sep 9, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Sep 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade oniguruma-develUpgrade oniguruma-debuginfoUpgrade oniguruma | Apr 27, 2020 | Sep 9, 2019 |
| Centos_linux | — | Upgrade php-intlUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-enchant-debuginfoUpgrade apcu-panelUpgrade php-bcmath-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-json-debuginfoUpgrade libzipUpgrade libzip-debuginfoUpgrade php-debugsourceUpgrade php-dbaUpgrade php-dbgUpgrade php-gd-debuginfoUpgrade php-pecl-zipUpgrade libzip-develUpgrade php-gdUpgrade php-pgsql-debuginfoUpgrade php-opcacheUpgrade libzip-toolsUpgrade libzip-debugsourceUpgrade php-embeddedUpgrade php-fpm-debuginfoUpgrade php-enchantUpgrade php-snmpUpgrade php-soap-debuginfoUpgrade php-process-debuginfoUpgrade php-recodeUpgrade php-cli-debuginfoUpgrade php-cliUpgrade phpUpgrade php-mbstring-debuginfoUpgrade php-bcmathUpgrade php-ldapUpgrade php-gmp-debuginfoUpgrade php-embedded-debuginfoUpgrade php-ldap-debuginfoUpgrade php-odbcUpgrade php-mysqlndUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrdUpgrade php-snmp-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-debuginfoUpgrade php-processUpgrade php-recode-debuginfoUpgrade php-soapUpgrade php-jsonUpgrade php-pgsqlUpgrade php-common-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-xdebugUpgrade php-develUpgrade php-xmlUpgrade php-pearUpgrade php-commonUpgrade php-mysqlnd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-xmlrpcUpgrade php-dba-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-dbg-debuginfoUpgrade php-pecl-apcu-develUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pdoUpgrade php-odbc-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-mbstringUpgrade php-gmpUpgrade php-fpm | Sep 9, 2020 | Sep 9, 2019 |
| Debian | — | Upgrade libonig | Sep 13, 2019 | Sep 13, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | Jan 3, 2020 | Sep 9, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Sep 9, 2019 |
| Oracle_linux | — | Upgrade php-soapUpgrade php-processUpgrade php-intlUpgrade php-enchantUpgrade php-gdUpgrade libzip-develUpgrade php-mbstringUpgrade php-pecl-rrdUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade oniguruma-develUpgrade php-dbaUpgrade libzip-toolsUpgrade php-pecl-apcu-develUpgrade apcu-panelUpgrade php-opcacheUpgrade php-develUpgrade php-pecl-zipUpgrade php-recodeUpgrade php-snmpUpgrade php-pearUpgrade phpUpgrade php-xmlUpgrade php-ldapUpgrade onigurumaUpgrade php-pdoUpgrade libzipUpgrade php-fpmUpgrade php-pecl-apcuUpgrade php-cliUpgrade php-mysqlndUpgrade php-jsonUpgrade php-odbcUpgrade php-pecl-xdebugUpgrade php-commonUpgrade php-embeddedUpgrade php-dbgUpgrade php-gmpUpgrade php-bcmath | Sep 10, 2020 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade php-pecl-rrd-debuginfoUpgrade phpUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-intl-debuginfoUpgrade libzipUpgrade php-embeddedUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-xdebugUpgrade onigurumaUpgrade php-debugsourceUpgrade php-gdUpgrade php-mysqlndUpgrade php-recodeUpgrade php-cli-debuginfoUpgrade php-gd-debuginfoUpgrade php-pearUpgrade php-snmp-debuginfoUpgrade php-dbg-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-toolsUpgrade php-pdo-debuginfoUpgrade php-mbstringUpgrade php-pecl-rrdUpgrade php-jsonUpgrade php-gmpUpgrade php-ldap-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-opcacheUpgrade php-process-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-soapUpgrade php-embedded-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-debugsourceUpgrade php-dbaUpgrade oniguruma-debugsourceUpgrade oniguruma-debuginfoUpgrade php-enchantUpgrade php-processUpgrade php-xmlrpcUpgrade php-pdoNo solution existsUpgrade php-dbgUpgrade php-recode-debuginfoUpgrade php-xml-debuginfoUpgrade php-snmpUpgrade php-debuginfoUpgrade php-cliUpgrade php-odbcUpgrade php-mbstring-debuginfoUpgrade libzip-develUpgrade php-gmp-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-soap-debuginfoUpgrade oniguruma-develUpgrade php-json-debuginfoUpgrade php-commonUpgrade php-bcmathUpgrade php-develUpgrade php-common-debuginfoUpgrade php-fpmUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debugsourceUpgrade php-fpm-debuginfoUpgrade php-ldapUpgrade php-pgsqlUpgrade apcu-panelUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-dba-debuginfoUpgrade libzip-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-intlUpgrade php-xmlUpgrade php-enchant-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebug-debuginfo | Sep 9, 2020 | Sep 9, 2019 |
| Rocky_linux | — | Upgrade php-gd-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-processUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade libzipUpgrade php-intl-debuginfoUpgrade php-gmpUpgrade php-snmp-debuginfoUpgrade php-pecl-zipUpgrade php-dbaUpgrade php-jsonUpgrade php-odbc-debuginfoUpgrade php-gmp-debuginfoUpgrade libzip-toolsUpgrade libzip-debuginfoUpgrade php-pdo-debuginfoUpgrade php-xml-debuginfoUpgrade php-bcmathUpgrade php-pgsqlUpgrade php-bcmath-debuginfoUpgrade php-pdoUpgrade php-odbcUpgrade php-pecl-rrdUpgrade php-mbstring-debuginfoUpgrade php-process-debuginfoUpgrade php-fpm-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-dba-debuginfoUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-intlUpgrade php-gdUpgrade php-pecl-xdebug-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-debugsourceUpgrade php-cli-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-ldap-debuginfoUpgrade php-json-debuginfoUpgrade php-soapUpgrade php-dbg-debuginfoUpgrade php-commonUpgrade phpUpgrade php-mbstringUpgrade php-recode-debuginfoUpgrade php-dbgUpgrade php-recodeUpgrade php-develUpgrade php-snmpUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-embeddedUpgrade php-ldapUpgrade php-embedded-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-rrd-debugsourceUpgrade php-mysqlndUpgrade php-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-cliUpgrade php-common-debuginfoUpgrade php-opcacheUpgrade libzip-develUpgrade php-pecl-rrd-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-xdebugUpgrade php-enchant-debuginfoUpgrade php-xmlUpgrade php-debugsourceUpgrade php-pecl-zip-debuginfo | Mar 12, 2024 | Sep 9, 2019 |
| Suse | — | Upgrade oniguruma-develUpgrade libonig4 | Aug 9, 2024 | Sep 9, 2019 |
| Ubuntu | — | Upgrade libonig2 (Ubuntu Pro)Upgrade libonig4 (Ubuntu Pro) | Aug 18, 2020 | Sep 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub