Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-enchantUpgrade php-pecl-zipUpgrade apcu-panelUpgrade php-ldapUpgrade php-dbgUpgrade oniguruma-develUpgrade php-snmpUpgrade php-opcacheUpgrade libzipUpgrade libzip-toolsUpgrade php-xmlUpgrade php-cliUpgrade php-embeddedUpgrade php-mysqlndUpgrade php-bcmathUpgrade libzip-develUpgrade php-recodeUpgrade php-pecl-apcuUpgrade php-dbaUpgrade phpUpgrade php-intlUpgrade php-gdUpgrade php-pdoUpgrade php-mbstringUpgrade php-gmpUpgrade onigurumaUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-develUpgrade php-pearUpgrade php-odbcUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-pecl-rrdUpgrade php-processUpgrade php-commonUpgrade php-jsonUpgrade php-xmlrpc | May 4, 2022 | Sep 9, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Sep 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade oniguruma-develUpgrade oniguruma-debuginfoUpgrade oniguruma | Apr 27, 2020 | Sep 9, 2019 |
| Centos_linux | — | Upgrade php-mbstringUpgrade php-pecl-rrdUpgrade php-processUpgrade php-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pearUpgrade php-recode-debuginfoUpgrade php-snmp-debuginfoUpgrade php-fpmUpgrade php-gmpUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebugUpgrade php-odbc-debuginfoUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-pdo-debuginfoUpgrade php-xmlUpgrade php-intl-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-dba-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-commonUpgrade php-dbg-debuginfoUpgrade php-common-debuginfoUpgrade php-develUpgrade php-xml-debuginfoUpgrade php-pgsqlUpgrade php-jsonUpgrade php-xmlrpc-debuginfoUpgrade php-xmlrpcUpgrade libzip-tools-debuginfoUpgrade libzip-debuginfoUpgrade php-ldap-debuginfoUpgrade php-process-debuginfoUpgrade libzip-debugsourceUpgrade php-snmpUpgrade php-gd-debuginfoUpgrade php-enchantUpgrade php-dbgUpgrade php-dbaUpgrade php-pgsql-debuginfoUpgrade php-gdUpgrade php-gmp-debuginfoUpgrade libzip-develUpgrade php-pecl-zipUpgrade php-pecl-xdebug-debugsourceUpgrade php-mysqlndUpgrade php-fpm-debuginfoUpgrade php-opcacheUpgrade php-pecl-zip-debuginfoUpgrade php-json-debuginfoUpgrade php-intlUpgrade php-bcmath-debuginfoUpgrade apcu-panelUpgrade phpUpgrade php-bcmathUpgrade php-ldapUpgrade php-cli-debuginfoUpgrade libzipUpgrade php-debugsourceUpgrade php-enchant-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-odbcUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-apcuUpgrade php-mbstring-debuginfoUpgrade php-embedded-debuginfoUpgrade php-recodeUpgrade libzip-toolsUpgrade php-cliUpgrade php-embeddedUpgrade php-soap-debuginfo | Sep 9, 2020 | Sep 9, 2019 |
| Debian | — | Upgrade libonig | Sep 13, 2019 | Sep 13, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Jan 3, 2020 | Sep 9, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Sep 9, 2019 |
| Oracle_linux | — | Upgrade php-pecl-apcu-develUpgrade php-opcacheUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-dbaUpgrade php-soapUpgrade php-processUpgrade php-gdUpgrade php-enchantUpgrade php-pecl-rrdUpgrade php-intlUpgrade apcu-panelUpgrade oniguruma-develUpgrade libzip-develUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-pecl-apcuUpgrade php-gmpUpgrade php-fpmUpgrade php-embeddedUpgrade php-pearUpgrade php-jsonUpgrade php-snmpUpgrade php-ldapUpgrade php-odbcUpgrade php-mysqlndUpgrade php-commonUpgrade php-develUpgrade libzipUpgrade php-pdoUpgrade php-cliUpgrade onigurumaUpgrade php-bcmathUpgrade phpUpgrade php-xmlUpgrade php-recodeUpgrade php-dbgUpgrade php-pecl-zipUpgrade php-pecl-xdebug | Sep 10, 2020 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-develUpgrade php-gd-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-apcu-debuginfoUpgrade php-ldap-debuginfoUpgrade php-jsonUpgrade php-recodeUpgrade onigurumaUpgrade php-embeddedUpgrade php-process-debuginfoUpgrade php-dbaUpgrade php-opcacheUpgrade php-bcmath-debuginfoUpgrade php-soapUpgrade libzip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-embedded-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-enchantUpgrade php-mysqlndUpgrade oniguruma-debugsourceUpgrade oniguruma-debuginfoUpgrade php-pdoUpgrade libzipUpgrade libzip-toolsUpgrade php-pearUpgrade php-pecl-rrdUpgrade php-mbstringUpgrade php-gdUpgrade php-pdo-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-dbg-debuginfoUpgrade php-processUpgrade php-snmp-debuginfoUpgrade phpUpgrade php-cli-debuginfoUpgrade php-xmlrpcUpgrade php-debugsourceUpgrade php-intl-debuginfoUpgrade php-pecl-xdebugUpgrade php-gmpUpgrade php-fpm-debuginfoNo solution existsUpgrade php-xml-debuginfoUpgrade php-pgsqlUpgrade oniguruma-develUpgrade php-pecl-zip-debuginfoUpgrade php-fpmUpgrade php-odbc-debuginfoUpgrade php-common-debuginfoUpgrade php-commonUpgrade php-ldapUpgrade php-pecl-xdebug-debugsourceUpgrade libzip-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-apcu-debugsourceUpgrade apcu-panelUpgrade php-intlUpgrade php-enchant-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-gmp-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-cliUpgrade php-pgsql-debuginfoUpgrade php-json-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-debuginfoUpgrade php-dbgUpgrade libzip-develUpgrade php-recode-debuginfoUpgrade php-snmpUpgrade php-odbcUpgrade php-xmlUpgrade php-dba-debuginfoUpgrade php-bcmathUpgrade php-devel | Sep 9, 2020 | Sep 9, 2019 |
| Rocky_linux | — | Upgrade php-mysqlnd-debuginfoUpgrade php-process-debuginfoUpgrade php-opcache-debuginfoUpgrade php-intl-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-dbaUpgrade php-pecl-zipUpgrade php-pgsqlUpgrade php-json-debuginfoUpgrade php-ldap-debuginfoUpgrade php-odbcUpgrade php-pdoUpgrade php-cli-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-soapUpgrade libzip-debugsourceUpgrade libzip-debuginfoUpgrade php-pdo-debuginfoUpgrade php-snmp-debuginfoUpgrade php-mbstring-debuginfoUpgrade libzip-toolsUpgrade php-gd-debuginfoUpgrade php-gmpUpgrade php-processUpgrade php-bcmathUpgrade php-xml-debuginfoUpgrade php-pecl-rrdUpgrade php-odbc-debuginfoUpgrade php-dba-debuginfoUpgrade libzipUpgrade php-jsonUpgrade php-gdUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade libzip-tools-debuginfoUpgrade php-fpm-debuginfoUpgrade php-intlUpgrade php-gmp-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-cliUpgrade php-dbgUpgrade php-recodeUpgrade phpUpgrade php-opcacheUpgrade php-common-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-rrd-debuginfoUpgrade php-fpmUpgrade php-dbg-debuginfoUpgrade libzip-develUpgrade php-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-rrd-debugsourceUpgrade php-enchant-debuginfoUpgrade php-commonUpgrade php-develUpgrade php-soap-debuginfoUpgrade php-pecl-xdebugUpgrade php-recode-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-embedded-debuginfoUpgrade php-snmpUpgrade php-mbstringUpgrade php-debugsourceUpgrade php-mysqlndUpgrade php-ldapUpgrade php-embeddedUpgrade php-xml | Mar 12, 2024 | Sep 9, 2019 |
| Suse | — | Upgrade oniguruma-develUpgrade libonig4 | Aug 9, 2024 | Sep 9, 2019 |
| Ubuntu | — | Upgrade libonig2 (Ubuntu Pro)Upgrade libonig4 (Ubuntu Pro) | Aug 18, 2020 | Sep 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub