Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-commonUpgrade php-pdoUpgrade php-pgsqlUpgrade php-fpmUpgrade php-pecl-apcu-develUpgrade php-pearUpgrade php-xmlrpcUpgrade onigurumaUpgrade php-mbstringUpgrade php-gmpUpgrade php-processUpgrade php-odbcUpgrade php-pecl-xdebugUpgrade php-jsonUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-develUpgrade apcu-panelUpgrade libzipUpgrade php-embeddedUpgrade php-intlUpgrade php-ldapUpgrade php-dbgUpgrade php-mysqlndUpgrade php-enchantUpgrade libzip-toolsUpgrade php-snmpUpgrade php-xmlUpgrade libzip-develUpgrade php-recodeUpgrade oniguruma-develUpgrade php-gdUpgrade php-cliUpgrade php-pecl-apcuUpgrade php-pecl-zipUpgrade php-bcmathUpgrade php-dbaUpgrade php-opcacheUpgrade php | May 4, 2022 | Sep 9, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Sep 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade onigurumaUpgrade oniguruma-debuginfoUpgrade oniguruma-devel | Apr 27, 2020 | Sep 9, 2019 |
| Centos_linux | — | Upgrade php-xml-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-pecl-xdebug-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-gmpUpgrade php-odbc-debuginfoUpgrade php-processUpgrade php-common-debuginfoUpgrade php-mbstringUpgrade php-xmlUpgrade php-jsonUpgrade php-snmp-debuginfoUpgrade php-pdo-debuginfoUpgrade php-opcache-debuginfoUpgrade php-recode-debuginfoUpgrade php-pearUpgrade php-soapUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-dbg-debuginfoUpgrade php-dba-debuginfoUpgrade php-fpmUpgrade php-xmlrpc-debuginfoUpgrade php-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-intl-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-commonUpgrade php-pecl-xdebugUpgrade php-develUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-rrdUpgrade php-fpm-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-embedded-debuginfoUpgrade php-dbaUpgrade php-enchantUpgrade php-gd-debuginfoUpgrade php-odbcUpgrade php-ldapUpgrade php-gdUpgrade php-pecl-apcu-debugsourceUpgrade php-embeddedUpgrade php-mbstring-debuginfoUpgrade libzip-toolsUpgrade php-soap-debuginfoUpgrade libzip-debugsourceUpgrade php-snmpUpgrade php-enchant-debuginfoUpgrade php-dbgUpgrade php-cliUpgrade php-bcmath-debuginfoUpgrade php-opcacheUpgrade php-debugsourceUpgrade libzip-debuginfoUpgrade libzipUpgrade php-pgsql-debuginfoUpgrade php-cli-debuginfoUpgrade php-recodeUpgrade apcu-panelUpgrade php-ldap-debuginfoUpgrade php-bcmathUpgrade php-pecl-zip-debuginfoUpgrade php-intlUpgrade php-json-debuginfoUpgrade phpUpgrade php-pecl-apcuUpgrade php-mysqlndUpgrade libzip-develUpgrade php-pecl-zipUpgrade php-pecl-xdebug-debugsourceUpgrade php-gmp-debuginfo | Sep 9, 2020 | Sep 9, 2019 |
| Debian | — | Upgrade libonig | Sep 13, 2019 | Sep 13, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Jan 3, 2020 | Sep 9, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Sep 9, 2019 |
| Oracle_linux | — | Upgrade php-xmlrpcUpgrade php-mbstringUpgrade php-intlUpgrade libzip-toolsUpgrade apcu-panelUpgrade php-pecl-rrdUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade php-opcacheUpgrade php-processUpgrade libzip-develUpgrade php-gdUpgrade php-soapUpgrade oniguruma-develUpgrade php-pgsqlUpgrade php-enchantUpgrade php-xmlUpgrade php-jsonUpgrade php-pdoUpgrade php-develUpgrade php-recodeUpgrade php-ldapUpgrade phpUpgrade php-commonUpgrade php-gmpUpgrade php-bcmathUpgrade onigurumaUpgrade php-embeddedUpgrade php-cliUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-dbgUpgrade php-pecl-zipUpgrade php-odbcUpgrade libzipUpgrade php-pecl-apcuUpgrade php-mysqlndUpgrade php-pearUpgrade php-snmp | Sep 10, 2020 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade php-debugsourceUpgrade php-gdUpgrade php-pearUpgrade php-gd-debuginfoUpgrade php-cli-debuginfoUpgrade php-mbstringUpgrade php-embeddedUpgrade php-pdo-debuginfoUpgrade libzip-toolsUpgrade php-dbg-debuginfoUpgrade phpUpgrade php-pecl-rrdUpgrade libzip-tools-debuginfoUpgrade php-pdoUpgrade php-jsonUpgrade php-mysqlndUpgrade php-ldap-debuginfoUpgrade php-opcacheUpgrade php-process-debuginfoUpgrade php-opcache-debuginfoUpgrade php-snmp-debuginfoUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-xmlrpc-debuginfoUpgrade php-recodeUpgrade php-pecl-xdebugUpgrade php-enchantUpgrade php-intl-debuginfoUpgrade php-processUpgrade libzipUpgrade php-bcmath-debuginfoUpgrade php-pecl-zipUpgrade php-dbaUpgrade oniguruma-debugsourceUpgrade oniguruma-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-rrd-debugsourceUpgrade libzip-debugsourceUpgrade php-embedded-debuginfoUpgrade php-gmpUpgrade onigurumaUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcuUpgrade php-xmlUpgrade php-odbcUpgrade php-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-commonNo solution existsUpgrade php-mysqlnd-debuginfoUpgrade php-dbgUpgrade php-xml-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-ldapUpgrade php-intlUpgrade php-mbstring-debuginfoUpgrade php-bcmathUpgrade oniguruma-develUpgrade php-json-debuginfoUpgrade php-develUpgrade php-gmp-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-dba-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-cliUpgrade php-snmpUpgrade libzip-develUpgrade apcu-panelUpgrade php-pgsqlUpgrade php-fpm-debuginfoUpgrade php-recode-debuginfoUpgrade php-soap-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-odbc-debuginfoUpgrade php-common-debuginfoUpgrade php-fpm | Sep 9, 2020 | Sep 9, 2019 |
| Rocky_linux | — | Upgrade php-gdUpgrade php-dba-debuginfoUpgrade php-gmpUpgrade php-pdo-debuginfoUpgrade php-pecl-zipUpgrade php-snmp-debuginfoUpgrade libzipUpgrade php-dbaUpgrade php-mbstring-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade libzip-toolsUpgrade php-enchantUpgrade php-fpm-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-intlUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-opcache-debuginfoUpgrade php-ldap-debuginfoUpgrade php-soapUpgrade php-gmp-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade php-pdoUpgrade php-json-debuginfoUpgrade php-odbcUpgrade libzip-debugsourceUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrdUpgrade php-cli-debuginfoUpgrade php-gd-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade libzip-debuginfoUpgrade php-processUpgrade php-intl-debuginfoUpgrade php-pgsqlUpgrade php-pgsql-debuginfoUpgrade php-bcmathUpgrade libzip-develUpgrade php-xmlrpcUpgrade php-dbg-debuginfoUpgrade php-dbgUpgrade php-fpmUpgrade php-pecl-rrd-debuginfoUpgrade php-snmpUpgrade php-pecl-xdebug-debuginfoUpgrade php-debuginfoUpgrade php-mysqlndUpgrade php-ldapUpgrade php-embedded-debuginfoUpgrade php-soap-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebugUpgrade php-develUpgrade php-pecl-zip-debuginfoUpgrade php-mbstringUpgrade php-recodeUpgrade php-commonUpgrade php-xmlUpgrade phpUpgrade php-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-apcuUpgrade php-recode-debuginfoUpgrade php-embeddedUpgrade php-opcacheUpgrade php-common-debuginfoUpgrade php-cli | Mar 12, 2024 | Sep 9, 2019 |
| Suse | — | Upgrade oniguruma-develUpgrade libonig4 | Aug 9, 2024 | Sep 9, 2019 |
| Ubuntu | — | Upgrade libonig2 (Ubuntu Pro)Upgrade libonig4 (Ubuntu Pro) | Aug 18, 2020 | Sep 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub