Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-odbcUpgrade php-jsonUpgrade php-soapUpgrade php-commonUpgrade php-mbstringUpgrade php-pecl-xdebugUpgrade php-develUpgrade php-pecl-rrdUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-processUpgrade php-pgsqlUpgrade onigurumaUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-pearUpgrade php-gdUpgrade phpUpgrade php-ldapUpgrade php-pecl-apcuUpgrade libzip-toolsUpgrade php-bcmathUpgrade php-cliUpgrade php-dbgUpgrade libzipUpgrade apcu-panelUpgrade php-opcacheUpgrade php-pecl-zipUpgrade php-dbaUpgrade php-recodeUpgrade php-enchantUpgrade php-intlUpgrade php-xmlUpgrade oniguruma-develUpgrade php-snmpUpgrade libzip-develUpgrade php-embeddedUpgrade php-mysqlnd | May 4, 2022 | Sep 9, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Sep 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade oniguruma-debuginfoUpgrade oniguruma-develUpgrade oniguruma | Apr 27, 2020 | Sep 9, 2019 |
| Centos_linux | — | Upgrade php-pecl-rrdUpgrade php-develUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-zip-debugsourceUpgrade php-dbg-debuginfoUpgrade php-debuginfoUpgrade php-pdoUpgrade php-dba-debuginfoUpgrade php-opcache-debuginfoUpgrade php-gmpUpgrade php-pearUpgrade php-mbstringUpgrade php-commonUpgrade php-processUpgrade php-recode-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-apcu-develUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-odbc-debuginfoUpgrade php-fpmUpgrade php-intl-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-common-debuginfoUpgrade php-soapUpgrade php-xmlUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-jsonUpgrade libzip-tools-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-opcacheUpgrade php-mbstring-debuginfoUpgrade php-enchantUpgrade php-gd-debuginfoUpgrade php-gdUpgrade libzip-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-debugsourceUpgrade libzipUpgrade php-pgsql-debuginfoUpgrade php-debugsourceUpgrade php-gmp-debuginfoUpgrade libzip-develUpgrade php-pecl-zipUpgrade php-pecl-xdebug-debugsourceUpgrade php-mysqlndUpgrade php-process-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dbaUpgrade php-dbgUpgrade php-embedded-debuginfoUpgrade php-intlUpgrade php-recodeUpgrade php-bcmathUpgrade php-ldap-debuginfoUpgrade phpUpgrade php-ldapUpgrade php-cliUpgrade apcu-panelUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-json-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-apcuUpgrade php-odbcUpgrade php-snmpUpgrade php-soap-debuginfoUpgrade php-embeddedUpgrade libzip-tools | Sep 9, 2020 | Sep 9, 2019 |
| Debian | — | Upgrade libonig | Sep 13, 2019 | Sep 13, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Jan 3, 2020 | Sep 9, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Sep 9, 2019 |
| Oracle_linux | — | Upgrade php-intlUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-processUpgrade apcu-panelUpgrade php-opcacheUpgrade php-enchantUpgrade php-soapUpgrade oniguruma-develUpgrade php-gdUpgrade libzip-develUpgrade php-pgsqlUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade libzip-toolsUpgrade php-pecl-rrdUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-ldapUpgrade php-recodeUpgrade php-pearUpgrade php-bcmathUpgrade php-embeddedUpgrade php-xmlUpgrade php-dbgUpgrade php-pecl-xdebugUpgrade php-pecl-zipUpgrade php-develUpgrade php-mysqlndUpgrade php-jsonUpgrade php-snmpUpgrade php-cliUpgrade php-fpmUpgrade onigurumaUpgrade php-pdoUpgrade libzipUpgrade php-gmpUpgrade phpUpgrade php-odbc | Sep 10, 2020 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade php-pecl-zip-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-enchant-debuginfoUpgrade php-recode-debuginfoUpgrade php-intlUpgrade php-dba-debuginfoUpgrade apcu-panelUpgrade php-fpm-debuginfoUpgrade php-dbgUpgrade oniguruma-develUpgrade php-pecl-apcuUpgrade php-odbc-debuginfoUpgrade php-common-debuginfoUpgrade php-xmlUpgrade php-pecl-xdebug-debuginfoUpgrade php-soap-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcu-debugsourceUpgrade php-commonUpgrade php-develUpgrade php-json-debuginfoUpgrade php-bcmathUpgrade php-fpmUpgrade php-gmp-debuginfoNo solution existsUpgrade php-debuginfoUpgrade libzip-develUpgrade php-pecl-xdebug-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-ldapUpgrade libzip-debuginfoUpgrade php-xml-debuginfoUpgrade php-odbcUpgrade php-mysqlnd-debuginfoUpgrade php-snmpUpgrade php-mbstring-debuginfoUpgrade php-cliUpgrade php-enchantUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-jsonUpgrade libzip-debugsourceUpgrade php-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade oniguruma-debuginfoUpgrade php-dbg-debuginfoUpgrade php-gd-debuginfoUpgrade php-xmlrpcUpgrade php-process-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mysqlndUpgrade php-pdoUpgrade php-intl-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-xdebugUpgrade libzipUpgrade php-pecl-rrd-debuginfoUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-recodeUpgrade php-pecl-zipUpgrade php-processUpgrade onigurumaUpgrade php-pecl-rrdUpgrade php-embeddedUpgrade php-ldap-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pearUpgrade php-opcacheUpgrade php-gdUpgrade php-cli-debuginfoUpgrade php-embedded-debuginfoUpgrade phpUpgrade php-soapUpgrade oniguruma-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-dbaUpgrade php-pecl-rrd-debugsourceUpgrade php-snmp-debuginfo | Sep 9, 2020 | Sep 9, 2019 |
| Rocky_linux | — | Upgrade php-enchant-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-recodeUpgrade php-recode-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-soap-debuginfoUpgrade php-mbstringUpgrade php-pecl-apcuUpgrade phpUpgrade php-ldapUpgrade php-embedded-debuginfoUpgrade php-embeddedUpgrade php-snmpUpgrade php-develUpgrade php-debuginfoUpgrade php-debugsourceUpgrade libzip-develUpgrade php-pecl-xdebugUpgrade php-dbg-debuginfoUpgrade php-commonUpgrade php-fpmUpgrade php-xmlUpgrade php-opcacheUpgrade php-dbgUpgrade php-pecl-rrd-debuginfoUpgrade php-mysqlndUpgrade php-xmlrpcUpgrade php-cliUpgrade php-common-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-rrdUpgrade php-jsonUpgrade php-gmp-debuginfoUpgrade libzip-debuginfoUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-pecl-zip-debugsourceUpgrade php-fpm-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-intlUpgrade php-mysqlnd-debuginfoUpgrade php-intl-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-zipUpgrade php-dbaUpgrade libzipUpgrade php-pecl-apcu-debuginfoUpgrade php-processUpgrade php-gmpUpgrade php-gdUpgrade php-dba-debuginfoUpgrade php-soapUpgrade php-pdoUpgrade libzip-toolsUpgrade php-odbcUpgrade php-pecl-xdebug-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-pgsqlUpgrade php-gd-debuginfoUpgrade php-cli-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-bcmathUpgrade php-snmp-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pdo-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-ldap-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-debugsourceUpgrade php-xml-debuginfo | Mar 12, 2024 | Sep 9, 2019 |
| Suse | — | Upgrade oniguruma-develUpgrade libonig4 | Aug 9, 2024 | Sep 9, 2019 |
| Ubuntu | — | Upgrade libonig4 (Ubuntu Pro)Upgrade libonig2 (Ubuntu Pro) | Aug 18, 2020 | Sep 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub