Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-fpmUpgrade php-commonUpgrade php-gmpUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-pdoUpgrade php-develUpgrade php-jsonUpgrade php-pearUpgrade php-processUpgrade onigurumaUpgrade php-soapUpgrade php-odbcUpgrade php-pecl-xdebugUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-mysqlndUpgrade oniguruma-develUpgrade libzip-develUpgrade phpUpgrade php-xmlUpgrade php-intlUpgrade php-pecl-zipUpgrade php-pecl-apcuUpgrade php-embeddedUpgrade php-ldapUpgrade php-gdUpgrade php-bcmathUpgrade apcu-panelUpgrade php-dbaUpgrade php-snmpUpgrade php-opcacheUpgrade php-cliUpgrade php-enchantUpgrade libzipUpgrade php-dbgUpgrade php-recode | May 4, 2022 | Sep 9, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Sep 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade onigurumaUpgrade oniguruma-develUpgrade oniguruma-debuginfo | Apr 27, 2020 | Sep 9, 2019 |
| Centos_linux | — | Upgrade php-bcmathUpgrade php-json-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-intlUpgrade php-snmpUpgrade php-ldap-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-recodeUpgrade php-ldapUpgrade php-dbgUpgrade php-opcacheUpgrade php-embeddedUpgrade libzip-debugsourceUpgrade libzipUpgrade php-embedded-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-cliUpgrade phpUpgrade php-pecl-apcu-debugsourceUpgrade php-enchant-debuginfoUpgrade php-odbcUpgrade php-gd-debuginfoUpgrade php-pecl-zipUpgrade libzip-develUpgrade php-mysqlndUpgrade php-pecl-xdebug-debugsourceUpgrade php-gdUpgrade php-dbaUpgrade php-soap-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pecl-apcuUpgrade php-enchantUpgrade php-gmp-debuginfoUpgrade php-pgsql-debuginfoUpgrade libzip-debuginfoUpgrade php-process-debuginfoUpgrade libzip-toolsUpgrade apcu-panelUpgrade php-bcmath-debuginfoUpgrade php-cli-debuginfoUpgrade php-debugsourceUpgrade php-pdoUpgrade php-pecl-xdebug-debuginfoUpgrade php-jsonUpgrade php-dbg-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-dba-debuginfoUpgrade php-fpmUpgrade php-gmpUpgrade php-debuginfoUpgrade php-recode-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-rrdUpgrade php-develUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-develUpgrade libzip-tools-debuginfoUpgrade php-common-debuginfoUpgrade php-soapUpgrade php-xmlrpc-debuginfoUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-processUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-intl-debuginfoUpgrade php-pearUpgrade php-commonUpgrade php-snmp-debuginfoUpgrade php-pdo-debuginfoUpgrade php-xml-debuginfoUpgrade php-odbc-debuginfoUpgrade php-mbstring | Sep 9, 2020 | Sep 9, 2019 |
| Debian | — | Upgrade libonig | Sep 13, 2019 | Sep 13, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Jan 3, 2020 | Sep 9, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Sep 9, 2019 |
| Oracle_linux | — | Upgrade php-mbstringUpgrade php-intlUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-pgsqlUpgrade php-processUpgrade oniguruma-develUpgrade php-xmlrpcUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade apcu-panelUpgrade php-opcacheUpgrade libzip-toolsUpgrade php-enchantUpgrade libzip-develUpgrade php-dbaUpgrade php-gmpUpgrade php-cliUpgrade php-snmpUpgrade php-xmlUpgrade php-bcmathUpgrade php-pearUpgrade libzipUpgrade php-pecl-xdebugUpgrade php-pecl-zipUpgrade php-ldapUpgrade phpUpgrade php-pdoUpgrade php-fpmUpgrade php-jsonUpgrade php-develUpgrade onigurumaUpgrade php-odbcUpgrade php-commonUpgrade php-embeddedUpgrade php-pecl-apcuUpgrade php-mysqlndUpgrade php-recodeUpgrade php-dbg | Sep 10, 2020 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade php-recode-debuginfoUpgrade php-gmp-debuginfoNo solution existsUpgrade php-soap-debuginfoUpgrade php-common-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pgsqlUpgrade php-fpmUpgrade php-json-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-develUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade oniguruma-develUpgrade php-enchant-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dbgUpgrade apcu-panelUpgrade php-cliUpgrade libzip-debuginfoUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debugsourceUpgrade php-odbcUpgrade php-ldapUpgrade libzip-develUpgrade php-snmpUpgrade php-pecl-apcu-debugsourceUpgrade php-fpm-debuginfoUpgrade php-intlUpgrade php-debuginfoUpgrade php-bcmathUpgrade php-pecl-zip-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-xmlUpgrade php-jsonUpgrade php-gd-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade libzip-debugsourceUpgrade oniguruma-debugsourceUpgrade libzip-tools-debuginfoUpgrade libzip-toolsUpgrade php-opcache-debuginfoUpgrade php-pdoUpgrade php-mysqlndUpgrade php-pecl-xdebugUpgrade php-pearUpgrade php-soapUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-dbg-debuginfoUpgrade php-mbstringUpgrade php-pecl-rrdUpgrade php-gdUpgrade php-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade libzipUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-cli-debuginfoUpgrade php-processUpgrade php-pdo-debuginfoUpgrade php-enchantUpgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade php-xmlrpcUpgrade php-dbaUpgrade php-pecl-zipUpgrade php-embedded-debuginfoUpgrade php-recodeUpgrade onigurumaUpgrade oniguruma-debuginfoUpgrade php-embeddedUpgrade phpUpgrade php-ldap-debuginfoUpgrade php-bcmath-debuginfo | Sep 9, 2020 | Sep 9, 2019 |
| Rocky_linux | — | Upgrade php-pdoUpgrade php-xmlrpc-debuginfoUpgrade php-json-debuginfoUpgrade php-ldap-debuginfoUpgrade libzip-debugsourceUpgrade php-odbcUpgrade php-pecl-xdebug-debugsourceUpgrade php-soapUpgrade php-opcache-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-gmp-debuginfoUpgrade php-bcmathUpgrade php-pdo-debuginfoUpgrade php-mbstring-debuginfoUpgrade libzip-debuginfoUpgrade php-xml-debuginfoUpgrade php-gdUpgrade php-gd-debuginfoUpgrade libzip-toolsUpgrade php-enchantUpgrade php-jsonUpgrade php-odbc-debuginfoUpgrade php-pecl-rrdUpgrade libzipUpgrade php-dbaUpgrade php-pecl-zipUpgrade libzip-tools-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dba-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-intl-debuginfoUpgrade php-processUpgrade php-cli-debuginfoUpgrade php-intlUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-pgsqlUpgrade php-process-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-debugsourceUpgrade php-soap-debuginfoUpgrade phpUpgrade php-xmlUpgrade php-recodeUpgrade php-pecl-apcuUpgrade php-recode-debuginfoUpgrade php-embeddedUpgrade php-ldapUpgrade php-pecl-rrd-debugsourceUpgrade php-debuginfoUpgrade php-mysqlndUpgrade php-cliUpgrade php-common-debuginfoUpgrade php-opcacheUpgrade php-snmpUpgrade php-pecl-xdebug-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-mbstringUpgrade php-xmlrpcUpgrade libzip-develUpgrade php-dbg-debuginfoUpgrade php-dbgUpgrade php-fpmUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebugUpgrade php-enchant-debuginfoUpgrade php-develUpgrade php-common | Mar 12, 2024 | Sep 9, 2019 |
| Suse | — | Upgrade oniguruma-develUpgrade libonig4 | Aug 9, 2024 | Sep 9, 2019 |
| Ubuntu | — | Upgrade libonig4 (Ubuntu Pro)Upgrade libonig2 (Ubuntu Pro) | Aug 18, 2020 | Sep 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub