Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-dbaUpgrade php-recodeUpgrade php-snmpUpgrade oniguruma-develUpgrade phpUpgrade libzipUpgrade php-enchantUpgrade php-pecl-apcuUpgrade php-xmlUpgrade libzip-toolsUpgrade php-bcmathUpgrade php-intlUpgrade libzip-develUpgrade php-cliUpgrade php-embeddedUpgrade apcu-panelUpgrade php-gdUpgrade php-opcacheUpgrade php-ldapUpgrade php-pecl-zipUpgrade php-dbgUpgrade php-mysqlndUpgrade php-pecl-apcu-develUpgrade php-pecl-rrdUpgrade php-pearUpgrade php-jsonUpgrade php-gmpUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-develUpgrade onigurumaUpgrade php-pdoUpgrade php-commonUpgrade php-pgsqlUpgrade php-mbstringUpgrade php-processUpgrade php-soapUpgrade php-pecl-xdebug | May 4, 2022 | Sep 9, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Sep 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade onigurumaUpgrade oniguruma-develUpgrade oniguruma-debuginfo | Apr 27, 2020 | Sep 9, 2019 |
| Centos_linux | — | Upgrade php-commonUpgrade php-pecl-rrdUpgrade php-dba-debuginfoUpgrade php-mbstringUpgrade php-develUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-recode-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-intl-debuginfoUpgrade php-dbg-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pdoUpgrade php-xmlrpc-debuginfoUpgrade php-pearUpgrade php-common-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pgsqlUpgrade php-soapUpgrade php-xmlrpcUpgrade php-pecl-xdebugUpgrade php-opcache-debuginfoUpgrade php-xmlUpgrade php-jsonUpgrade php-odbc-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-debuginfoUpgrade php-fpmUpgrade php-gmpUpgrade php-processUpgrade php-cli-debuginfoUpgrade php-ldap-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pecl-zipUpgrade php-cliUpgrade php-ldapUpgrade php-recodeUpgrade libzipUpgrade libzip-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-apcu-debugsourceUpgrade php-dbgUpgrade php-embedded-debuginfoUpgrade php-gd-debuginfoUpgrade php-dbaUpgrade php-enchantUpgrade php-gmp-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-process-debuginfoUpgrade php-mysqlndUpgrade libzip-develUpgrade php-mbstring-debuginfoUpgrade libzip-toolsUpgrade php-embeddedUpgrade php-soap-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-json-debuginfoUpgrade php-intlUpgrade php-bcmath-debuginfoUpgrade apcu-panelUpgrade php-bcmathUpgrade php-opcacheUpgrade php-pecl-rrd-debugsourceUpgrade php-debugsourceUpgrade php-odbcUpgrade php-gdUpgrade php-enchant-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-snmpUpgrade php | Sep 9, 2020 | Sep 9, 2019 |
| Debian | — | Upgrade libonig | Sep 13, 2019 | Sep 13, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Jan 3, 2020 | Sep 9, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Sep 9, 2019 |
| Oracle_linux | — | Upgrade php-cliUpgrade php-fpmUpgrade php-jsonUpgrade php-pearUpgrade php-bcmathUpgrade phpUpgrade php-gmpUpgrade php-dbgUpgrade onigurumaUpgrade php-pdoUpgrade php-commonUpgrade php-develUpgrade php-mysqlndUpgrade libzipUpgrade php-odbcUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-pecl-xdebugUpgrade php-pecl-apcuUpgrade php-recodeUpgrade php-snmpUpgrade php-ldapUpgrade php-xmlUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade oniguruma-develUpgrade php-intlUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-processUpgrade libzip-toolsUpgrade php-gdUpgrade php-dbaUpgrade php-soapUpgrade php-enchantUpgrade php-pecl-rrdUpgrade libzip-develUpgrade php-opcacheUpgrade apcu-panel | Sep 10, 2020 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade oniguruma-debugsourceUpgrade libzip-debugsourceUpgrade oniguruma-debuginfoUpgrade php-soapUpgrade php-embedded-debuginfoUpgrade php-xmlrpcUpgrade php-opcacheUpgrade php-pecl-apcu-develUpgrade onigurumaUpgrade php-pecl-apcu-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-rrdUpgrade php-dbg-debuginfoUpgrade libzip-toolsUpgrade php-pdoUpgrade php-pearUpgrade php-jsonUpgrade php-embeddedUpgrade php-dbaUpgrade php-bcmath-debuginfoUpgrade php-mysqlndUpgrade php-opcache-debuginfoUpgrade php-process-debuginfoUpgrade php-mbstringUpgrade php-cli-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-gdUpgrade php-processUpgrade php-debugsourceUpgrade php-recodeUpgrade libzipUpgrade php-pecl-rrd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-ldap-debuginfoUpgrade phpUpgrade php-pecl-zipUpgrade php-snmp-debuginfoUpgrade php-intl-debuginfoUpgrade php-gmpUpgrade php-enchantUpgrade libzip-tools-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-xdebugUpgrade php-recode-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-bcmathUpgrade php-develUpgrade php-fpm-debuginfoUpgrade php-xml-debuginfoNo solution existsUpgrade php-snmpUpgrade php-odbcUpgrade php-mbstring-debuginfoUpgrade php-dba-debuginfoUpgrade php-intlUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-enchant-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-debuginfoUpgrade php-pecl-apcuUpgrade php-gmp-debuginfoUpgrade php-json-debuginfoUpgrade php-ldapUpgrade libzip-develUpgrade php-soap-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade apcu-panelUpgrade php-pecl-xdebug-debugsourceUpgrade php-cliUpgrade php-mysqlnd-debuginfoUpgrade libzip-debuginfoUpgrade php-fpmUpgrade oniguruma-develUpgrade php-common-debuginfoUpgrade php-xmlUpgrade php-commonUpgrade php-odbc-debuginfoUpgrade php-dbgUpgrade php-pgsql | Sep 9, 2020 | Sep 9, 2019 |
| Rocky_linux | — | Upgrade php-common-debuginfoUpgrade php-recodeUpgrade php-xmlUpgrade phpUpgrade php-mbstringUpgrade php-pecl-zip-debuginfoUpgrade php-ldapUpgrade php-mysqlndUpgrade php-enchant-debuginfoUpgrade php-develUpgrade php-snmpUpgrade php-soap-debuginfoUpgrade php-commonUpgrade php-pecl-xdebug-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-apcuUpgrade php-xmlrpcUpgrade php-pecl-rrd-debugsourceUpgrade libzip-develUpgrade php-cliUpgrade php-embeddedUpgrade php-recode-debuginfoUpgrade php-dbgUpgrade php-debuginfoUpgrade php-debugsourceUpgrade php-opcacheUpgrade php-dbg-debuginfoUpgrade php-fpmUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pgsqlUpgrade php-pecl-rrdUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-gd-debuginfoUpgrade php-cli-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-jsonUpgrade php-fpm-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-gdUpgrade php-dba-debuginfoUpgrade php-dbaUpgrade libzipUpgrade php-processUpgrade php-pecl-zipUpgrade php-gmpUpgrade php-pdo-debuginfoUpgrade php-ldap-debuginfoUpgrade php-soapUpgrade php-json-debuginfoUpgrade libzip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pdoUpgrade php-opcache-debuginfoUpgrade libzip-debuginfoUpgrade php-intlUpgrade php-mbstring-debuginfoUpgrade php-bcmathUpgrade libzip-toolsUpgrade php-snmp-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-process-debuginfoUpgrade php-odbcUpgrade php-pecl-apcu-develUpgrade php-enchantUpgrade php-gmp-debuginfoUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfo | Mar 12, 2024 | Sep 9, 2019 |
| Suse | — | Upgrade libonig4Upgrade oniguruma-devel | Aug 9, 2024 | Sep 9, 2019 |
| Ubuntu | — | Upgrade libonig4 (Ubuntu Pro)Upgrade libonig2 (Ubuntu Pro) | Aug 18, 2020 | Sep 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub