Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-jsonUpgrade php-mbstringUpgrade php-odbcUpgrade php-soapUpgrade php-pearUpgrade onigurumaUpgrade php-gmpUpgrade php-commonUpgrade php-pecl-rrdUpgrade php-pdoUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-processUpgrade php-xmlrpcUpgrade php-develUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-xmlUpgrade php-embeddedUpgrade php-intlUpgrade php-mysqlndUpgrade php-enchantUpgrade libzip-develUpgrade php-pecl-apcuUpgrade php-recodeUpgrade libzipUpgrade oniguruma-develUpgrade php-dbaUpgrade php-snmpUpgrade php-dbgUpgrade php-ldapUpgrade apcu-panelUpgrade php-pecl-zipUpgrade php-gdUpgrade libzip-toolsUpgrade php-opcacheUpgrade phpUpgrade php-bcmathUpgrade php-cli | May 4, 2022 | Sep 9, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Sep 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade onigurumaUpgrade oniguruma-develUpgrade oniguruma-debuginfo | Apr 27, 2020 | Sep 9, 2019 |
| Centos_linux | — | Upgrade php-pecl-xdebugUpgrade php-jsonUpgrade php-common-debuginfoUpgrade php-dba-debuginfoUpgrade php-soapUpgrade php-pecl-xdebug-debuginfoUpgrade php-xml-debuginfoUpgrade php-intl-debuginfoUpgrade php-develUpgrade php-xmlrpcUpgrade libzip-tools-debuginfoUpgrade php-pgsqlUpgrade php-xmlrpc-debuginfoUpgrade php-pearUpgrade php-pecl-rrdUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-xmlUpgrade php-pdoUpgrade php-commonUpgrade php-recode-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-snmp-debuginfoUpgrade php-dbg-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-pdo-debuginfoUpgrade php-odbc-debuginfoUpgrade php-fpmUpgrade php-gmpUpgrade php-processUpgrade php-debuginfoUpgrade php-dbgUpgrade php-debugsourceUpgrade php-mysqlndUpgrade php-recodeUpgrade libzipUpgrade php-json-debuginfoUpgrade php-pecl-apcuUpgrade php-enchant-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade apcu-panelUpgrade php-intlUpgrade libzip-toolsUpgrade php-mbstring-debuginfoUpgrade libzip-debugsourceUpgrade php-ldap-debuginfoUpgrade php-pecl-zipUpgrade php-gmp-debuginfoUpgrade php-embeddedUpgrade php-soap-debuginfoUpgrade php-snmpUpgrade php-odbcUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-bcmath-debuginfoUpgrade libzip-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-bcmathUpgrade phpUpgrade php-cliUpgrade php-cli-debuginfoUpgrade php-ldapUpgrade php-pecl-xdebug-debugsourceUpgrade php-process-debuginfoUpgrade libzip-develUpgrade php-enchantUpgrade php-opcacheUpgrade php-gdUpgrade php-embedded-debuginfoUpgrade php-dba | Sep 9, 2020 | Sep 9, 2019 |
| Debian | — | Upgrade libonig | Sep 13, 2019 | Sep 13, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Jan 3, 2020 | Sep 9, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Sep 9, 2019 |
| Oracle_linux | — | Upgrade oniguruma-develUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade libzip-develUpgrade php-enchantUpgrade php-dbaUpgrade php-processUpgrade php-intlUpgrade libzip-toolsUpgrade php-xmlrpcUpgrade php-gdUpgrade php-mbstringUpgrade php-soapUpgrade apcu-panelUpgrade php-opcacheUpgrade php-pecl-rrdUpgrade phpUpgrade php-dbgUpgrade php-pecl-zipUpgrade php-pearUpgrade php-ldapUpgrade php-embeddedUpgrade libzipUpgrade php-cliUpgrade php-mysqlndUpgrade php-pecl-apcuUpgrade php-pecl-xdebugUpgrade php-gmpUpgrade php-bcmathUpgrade onigurumaUpgrade php-pdoUpgrade php-develUpgrade php-fpmUpgrade php-odbcUpgrade php-jsonUpgrade php-commonUpgrade php-xmlUpgrade php-snmpUpgrade php-recode | Sep 10, 2020 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade php-gmpUpgrade php-pecl-rrdUpgrade php-pearUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-dbg-debuginfoUpgrade php-pdo-debuginfoUpgrade php-cli-debuginfoUpgrade php-soapUpgrade php-jsonUpgrade php-intl-debuginfoUpgrade oniguruma-debuginfoUpgrade php-embedded-debuginfoUpgrade oniguruma-debugsourceUpgrade php-dbaUpgrade php-debugsourceUpgrade php-bcmath-debuginfoUpgrade onigurumaUpgrade php-pecl-zipUpgrade php-recodeUpgrade php-pecl-apcu-develUpgrade php-process-debuginfoUpgrade php-pecl-xdebugUpgrade php-processUpgrade libzipUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-snmp-debuginfoUpgrade php-gdUpgrade php-pecl-rrd-debugsourceUpgrade php-enchantUpgrade libzip-debugsourceUpgrade php-xmlrpcUpgrade php-pdoUpgrade libzip-tools-debuginfoUpgrade php-gd-debuginfoUpgrade php-opcache-debuginfoUpgrade phpUpgrade php-mysqlndUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-embeddedUpgrade php-opcacheUpgrade php-fpm-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-commonUpgrade php-soap-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-odbc-debuginfoUpgrade php-fpmUpgrade php-pgsql-debuginfoUpgrade php-dba-debuginfoUpgrade php-recode-debuginfoUpgrade php-develUpgrade php-xml-debuginfoUpgrade php-ldapUpgrade php-mbstring-debuginfoNo solution existsUpgrade libzip-develUpgrade apcu-panelUpgrade php-dbgUpgrade php-debuginfoUpgrade php-snmpUpgrade php-cliUpgrade php-odbcUpgrade php-common-debuginfoUpgrade php-pgsqlUpgrade oniguruma-develUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-intlUpgrade php-pecl-zip-debuginfoUpgrade php-enchant-debuginfoUpgrade php-gmp-debuginfoUpgrade php-xmlUpgrade php-json-debuginfoUpgrade php-bcmath | Sep 9, 2020 | Sep 9, 2019 |
| Rocky_linux | — | Upgrade php-debugsourceUpgrade phpUpgrade php-mbstringUpgrade php-pecl-zip-debuginfoUpgrade php-recodeUpgrade php-xmlUpgrade php-snmpUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebugUpgrade php-soap-debuginfoUpgrade php-ldapUpgrade php-mysqlndUpgrade php-commonUpgrade php-develUpgrade php-dbg-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcuUpgrade php-xmlrpcUpgrade php-opcacheUpgrade php-pecl-rrd-debugsourceUpgrade php-embedded-debuginfoUpgrade php-dbgUpgrade libzip-develUpgrade php-embeddedUpgrade php-common-debuginfoUpgrade php-debuginfoUpgrade php-cliUpgrade php-fpmUpgrade php-pecl-xdebug-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-zipUpgrade libzip-toolsUpgrade php-pdo-debuginfoUpgrade php-json-debuginfoUpgrade libzip-debugsourceUpgrade php-processUpgrade php-pecl-apcu-debuginfoUpgrade php-odbcUpgrade php-dbaUpgrade php-process-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-intl-debuginfoUpgrade php-gdUpgrade php-dba-debuginfoUpgrade php-cli-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-gd-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pdoUpgrade php-ldap-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-xml-debuginfoUpgrade php-gmp-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-rrdUpgrade php-odbc-debuginfoUpgrade php-jsonUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-develUpgrade php-intlUpgrade php-fpm-debuginfoUpgrade php-enchantUpgrade php-soapUpgrade php-gmpUpgrade libzipUpgrade php-opcache-debuginfo | Mar 12, 2024 | Sep 9, 2019 |
| Suse | — | Upgrade libonig4Upgrade oniguruma-devel | Aug 9, 2024 | Sep 9, 2019 |
| Ubuntu | — | Upgrade libonig2 (Ubuntu Pro)Upgrade libonig4 (Ubuntu Pro) | Aug 18, 2020 | Sep 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub