Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-mbstringUpgrade php-jsonUpgrade php-processUpgrade php-commonUpgrade php-gmpUpgrade onigurumaUpgrade php-pdoUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-odbcUpgrade php-pecl-xdebugUpgrade php-pecl-rrdUpgrade php-pearUpgrade php-pecl-apcu-develUpgrade php-develUpgrade php-fpmUpgrade php-soapUpgrade php-embeddedUpgrade php-pecl-apcuUpgrade libzipUpgrade php-cliUpgrade php-ldapUpgrade php-recodeUpgrade php-opcacheUpgrade php-pecl-zipUpgrade phpUpgrade oniguruma-develUpgrade php-snmpUpgrade php-xmlUpgrade php-mysqlndUpgrade apcu-panelUpgrade php-dbgUpgrade php-enchantUpgrade libzip-toolsUpgrade php-dbaUpgrade php-bcmathUpgrade php-intlUpgrade php-gdUpgrade libzip-devel | May 4, 2022 | Sep 9, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Sep 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade onigurumaUpgrade oniguruma-debuginfoUpgrade oniguruma-devel | Apr 27, 2020 | Sep 9, 2019 |
| Centos_linux | — | Upgrade libzip-develUpgrade php-pecl-zipUpgrade php-mysqlndUpgrade php-gmp-debuginfoUpgrade php-dbaUpgrade php-bcmath-debuginfoUpgrade php-json-debuginfoUpgrade php-intlUpgrade php-fpm-debuginfoUpgrade php-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-process-debuginfoUpgrade libzip-debuginfoUpgrade php-gdUpgrade php-opcacheUpgrade php-snmpUpgrade php-cli-debuginfoUpgrade php-ldap-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-debugsourceUpgrade libzip-toolsUpgrade php-embeddedUpgrade php-mbstring-debuginfoUpgrade php-enchant-debuginfoUpgrade php-bcmathUpgrade php-cliUpgrade phpUpgrade php-ldapUpgrade libzipUpgrade php-pecl-apcuUpgrade php-recodeUpgrade php-odbcUpgrade php-enchantUpgrade php-gd-debuginfoUpgrade php-dbgUpgrade apcu-panelUpgrade php-pecl-apcu-debugsourceUpgrade php-embedded-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpcUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-dba-debuginfoUpgrade php-xmlUpgrade php-jsonUpgrade php-xmlrpc-debuginfoUpgrade php-common-debuginfoUpgrade php-soapUpgrade php-gmpUpgrade libzip-tools-debuginfoUpgrade php-processUpgrade php-fpmUpgrade php-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pearUpgrade php-snmp-debuginfoUpgrade php-recode-debuginfoUpgrade php-intl-debuginfoUpgrade php-commonUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-pdo-debuginfoUpgrade php-odbc-debuginfoUpgrade php-mbstringUpgrade php-pecl-xdebugUpgrade php-pgsqlUpgrade php-dbg-debuginfoUpgrade php-develUpgrade php-pecl-rrd | Sep 9, 2020 | Sep 9, 2019 |
| Debian | — | Upgrade libonig | Sep 13, 2019 | Sep 13, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Jan 3, 2020 | Sep 9, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Sep 9, 2019 |
| Oracle_linux | — | Upgrade php-gmpUpgrade php-bcmathUpgrade php-pearUpgrade php-odbcUpgrade php-mysqlndUpgrade php-xmlUpgrade php-jsonUpgrade php-cliUpgrade php-pdoUpgrade php-develUpgrade php-snmpUpgrade libzipUpgrade php-fpmUpgrade phpUpgrade php-commonUpgrade php-pecl-apcuUpgrade onigurumaUpgrade php-embeddedUpgrade php-pecl-xdebugUpgrade php-dbgUpgrade php-pecl-zipUpgrade php-recodeUpgrade php-ldapUpgrade php-pecl-rrdUpgrade oniguruma-develUpgrade php-pgsqlUpgrade php-opcacheUpgrade php-dbaUpgrade php-intlUpgrade apcu-panelUpgrade php-mbstringUpgrade php-processUpgrade php-xmlrpcUpgrade libzip-toolsUpgrade libzip-develUpgrade php-gdUpgrade php-soapUpgrade php-enchantUpgrade php-pecl-apcu-devel | Sep 10, 2020 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade php-embedded-debuginfoUpgrade php-pdo-debuginfoUpgrade oniguruma-debugsourceUpgrade php-pecl-apcu-develUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-processUpgrade php-gdUpgrade php-debugsourceUpgrade php-cli-debuginfoUpgrade php-pecl-rrdUpgrade php-pdoUpgrade php-mysqlndUpgrade libzip-tools-debuginfoUpgrade php-dbaUpgrade php-embeddedUpgrade php-ldap-debuginfoUpgrade php-opcache-debuginfoUpgrade oniguruma-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzipUpgrade libzip-toolsUpgrade php-pecl-rrd-debuginfoUpgrade php-intl-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-jsonUpgrade php-recodeUpgrade phpUpgrade php-pecl-zipUpgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-xdebugUpgrade php-enchantUpgrade php-dbg-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade libzip-debugsourceUpgrade php-gmpUpgrade php-pearUpgrade php-xmlrpc-debuginfoUpgrade onigurumaUpgrade php-soapUpgrade php-xmlUpgrade php-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-pgsqlUpgrade php-json-debuginfoUpgrade php-fpmUpgrade php-bcmathUpgrade php-pecl-apcuUpgrade php-dba-debuginfoUpgrade oniguruma-develUpgrade php-intlUpgrade php-recode-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-common-debuginfoNo solution existsUpgrade php-odbc-debuginfoUpgrade php-cliUpgrade php-mysqlnd-debuginfoUpgrade php-commonUpgrade php-develUpgrade php-enchant-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade apcu-panelUpgrade php-gmp-debuginfoUpgrade php-fpm-debuginfoUpgrade libzip-debuginfoUpgrade php-ldapUpgrade php-odbcUpgrade php-dbgUpgrade php-snmpUpgrade libzip-develUpgrade php-mbstring-debuginfo | Sep 9, 2020 | Sep 9, 2019 |
| Rocky_linux | — | Upgrade phpUpgrade php-pecl-apcuUpgrade php-snmpUpgrade php-soap-debuginfoUpgrade php-xmlUpgrade php-dbg-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-rrd-debugsourceUpgrade php-recodeUpgrade php-pecl-zip-debuginfoUpgrade php-mbstringUpgrade php-fpmUpgrade php-develUpgrade php-pecl-xdebugUpgrade libzip-develUpgrade php-dbgUpgrade php-commonUpgrade php-embedded-debuginfoUpgrade php-mysqlndUpgrade php-debuginfoUpgrade php-embeddedUpgrade php-pecl-xdebug-debuginfoUpgrade php-debugsourceUpgrade php-ldapUpgrade php-enchant-debuginfoUpgrade php-opcacheUpgrade php-cliUpgrade php-common-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-gmpUpgrade php-xmlrpc-debuginfoUpgrade php-processUpgrade php-dbaUpgrade libzipUpgrade libzip-debugsourceUpgrade php-ldap-debuginfoUpgrade php-json-debuginfoUpgrade php-soapUpgrade php-pecl-xdebug-debugsourceUpgrade php-pdoUpgrade php-opcache-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-bcmathUpgrade php-pdo-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-snmp-debuginfoUpgrade php-cli-debuginfoUpgrade php-gd-debuginfoUpgrade libzip-toolsUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pgsqlUpgrade php-mbstring-debuginfoUpgrade php-dba-debuginfoUpgrade php-gdUpgrade php-intlUpgrade php-fpm-debuginfoUpgrade php-enchantUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-develUpgrade php-process-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-rrdUpgrade php-odbc-debuginfoUpgrade php-jsonUpgrade php-gmp-debuginfoUpgrade libzip-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-zipUpgrade php-odbc | Mar 12, 2024 | Sep 9, 2019 |
| Suse | — | Upgrade libonig4Upgrade oniguruma-devel | Aug 9, 2024 | Sep 9, 2019 |
| Ubuntu | — | Upgrade libonig2 (Ubuntu Pro)Upgrade libonig4 (Ubuntu Pro) | Aug 18, 2020 | Sep 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub