An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pgsqlUpgrade php-soapUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade php-pecl-apcu-develUpgrade php-pearUpgrade php-gmpUpgrade php-fpmUpgrade php-mbstringUpgrade php-develUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade php-dbgUpgrade php-xmlrpcUpgrade php-dbaUpgrade php-odbcUpgrade php-jsonUpgrade php-gdUpgrade php-pecl-zipUpgrade oniguruma-develUpgrade php-snmpUpgrade php-xmlUpgrade php-opcacheUpgrade apcu-panelUpgrade php-pecl-rrdUpgrade php-recodeUpgrade php-enchantUpgrade php-mysqlndUpgrade libzipUpgrade php-embeddedUpgrade php-ldapUpgrade phpUpgrade php-intlUpgrade php-processUpgrade php-cliUpgrade onigurumaUpgrade libzip-develUpgrade libzip-tools | May 4, 2022 | Nov 21, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Jan 3, 2020 | Nov 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade onigurumaUpgrade oniguruma-debuginfoUpgrade oniguruma-devel | Apr 27, 2020 | Nov 21, 2019 |
| Centos_linux | — | Upgrade php-pecl-rrdUpgrade php-mysqlnd-debuginfoUpgrade php-develUpgrade php-snmp-debuginfoUpgrade php-dbg-debuginfoUpgrade php-xml-debuginfoUpgrade php-xmlUpgrade php-commonUpgrade php-pecl-apcu-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-recode-debuginfoUpgrade php-mbstringUpgrade php-gmpUpgrade php-odbc-debuginfoUpgrade php-pecl-xdebugUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-develUpgrade php-dba-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-jsonUpgrade php-common-debuginfoUpgrade php-processUpgrade php-debuginfoUpgrade php-soapUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade php-opcache-debuginfoUpgrade php-fpmUpgrade php-pearUpgrade php-intl-debuginfoUpgrade php-pgsqlUpgrade libzip-toolsUpgrade php-recodeUpgrade php-pecl-xdebug-debugsourceUpgrade php-gd-debuginfoUpgrade libzip-debuginfoUpgrade php-snmpUpgrade php-gdUpgrade php-process-debuginfoUpgrade libzipUpgrade libzip-debugsourceUpgrade php-mysqlndUpgrade php-soap-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-zipUpgrade php-embedded-debuginfoUpgrade php-ldap-debuginfoUpgrade php-intlUpgrade php-cli-debuginfoUpgrade php-pecl-apcuUpgrade php-cliUpgrade php-opcacheUpgrade php-dbaUpgrade php-fpm-debuginfoUpgrade libzip-develUpgrade apcu-panelUpgrade php-dbgUpgrade php-pecl-zip-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-bcmathUpgrade php-ldapUpgrade php-gmp-debuginfoUpgrade php-embeddedUpgrade php-enchant-debuginfoUpgrade php-odbcUpgrade php-enchantUpgrade php-bcmath-debuginfoUpgrade php-debugsourceUpgrade phpUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-pgsql-debuginfo | Sep 9, 2020 | Nov 21, 2019 |
| Debian | — | Upgrade libonig | Dec 5, 2019 | Nov 21, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | Mar 24, 2020 | Nov 21, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Jan 3, 2020 | Nov 21, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.4-11.4.17.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Nov 21, 2019 |
| Oracle_linux | — | Upgrade php-pearUpgrade php-pecl-xdebugUpgrade php-pecl-zipUpgrade php-ldapUpgrade php-develUpgrade libzipUpgrade php-jsonUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-pgsqlUpgrade php-gdUpgrade php-dbaUpgrade php-processUpgrade php-bcmathUpgrade php-soapUpgrade php-pdoUpgrade php-gmpUpgrade php-pecl-apcuUpgrade php-odbcUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-fpmUpgrade php-cliUpgrade php-snmpUpgrade php-recodeUpgrade onigurumaUpgrade php-xmlUpgrade libzip-develUpgrade php-mysqlndUpgrade oniguruma-develUpgrade php-pecl-rrdUpgrade php-embeddedUpgrade php-dbgUpgrade apcu-panelUpgrade phpUpgrade php-opcacheUpgrade php-commonUpgrade libzip-toolsUpgrade php-intl | Sep 10, 2020 | Nov 6, 2019 |
| Redhat_linux | — | Upgrade php-embeddedUpgrade php-gd-debuginfoUpgrade php-mysqlndUpgrade php-mbstringUpgrade php-dbg-debuginfoUpgrade php-develUpgrade php-bcmathUpgrade php-pearUpgrade php-snmpUpgrade oniguruma-debuginfoUpgrade php-gdUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-gmp-debuginfoUpgrade php-soap-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-intl-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-xdebugUpgrade php-recode-debuginfoUpgrade libzip-develUpgrade php-pecl-xdebug-debuginfoUpgrade php-opcache-debuginfoUpgrade php-debugsourceUpgrade php-opcacheUpgrade php-processUpgrade php-cliUpgrade phpUpgrade oniguruma-debugsourceUpgrade php-fpmUpgrade php-enchantUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-rrdUpgrade libzipUpgrade php-pecl-zipUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade onigurumaUpgrade php-embedded-debuginfoUpgrade php-xmlUpgrade php-dbaUpgrade php-dba-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-apcuUpgrade php-pgsqlUpgrade libzip-tools-debuginfoUpgrade php-jsonUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pdoUpgrade php-ldapUpgrade php-gmpUpgrade php-process-debuginfoUpgrade libzip-debuginfoUpgrade php-soapUpgrade php-intlUpgrade php-pecl-zip-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-common-debuginfoUpgrade php-odbcUpgrade libzip-toolsUpgrade php-pecl-zip-debugsourceUpgrade php-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-json-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-enchant-debuginfoUpgrade oniguruma-develUpgrade apcu-panelUpgrade php-ldap-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-debugsourceUpgrade php-commonNo solution existsUpgrade php-pecl-xdebug-debugsourceUpgrade php-dbgUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcu-devel | Sep 9, 2020 | Nov 21, 2019 |
| Rocky_linux | — | Upgrade php-pecl-xdebug-debugsourceUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade php-recode-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade php-xmlUpgrade php-xml-debuginfoUpgrade php-commonUpgrade php-ldapUpgrade php-mysqlndUpgrade php-opcache-debuginfoUpgrade php-dba-debuginfoUpgrade php-odbcUpgrade libzip-debuginfoUpgrade libzip-develUpgrade php-dbgUpgrade php-bcmath-debuginfoUpgrade php-pecl-xdebugUpgrade php-pgsql-debuginfoUpgrade php-common-debuginfoUpgrade php-json-debuginfoUpgrade libzip-toolsUpgrade php-enchant-debuginfoUpgrade php-debuginfoUpgrade php-fpmUpgrade php-develUpgrade php-pecl-apcu-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-snmpUpgrade php-opcacheUpgrade php-pecl-zip-debuginfoUpgrade php-cliUpgrade php-mbstring-debuginfoUpgrade php-soap-debuginfoUpgrade php-dbaUpgrade php-pecl-rrd-debuginfoUpgrade php-fpm-debuginfoUpgrade php-gmpUpgrade libzip-debugsourceUpgrade php-bcmathUpgrade php-process-debuginfoUpgrade php-dbg-debuginfoUpgrade libzipUpgrade php-processUpgrade php-pecl-zip-debugsourceUpgrade php-pdo-debuginfoUpgrade php-mbstringUpgrade php-embedded-debuginfoUpgrade php-cli-debuginfoUpgrade phpUpgrade libzip-tools-debuginfoUpgrade php-gmp-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-embeddedUpgrade php-recodeUpgrade php-soapUpgrade php-intl-debuginfoUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-pecl-rrdUpgrade php-snmp-debuginfoUpgrade php-intlUpgrade php-jsonUpgrade php-xmlrpc-debuginfoUpgrade php-gd-debuginfoUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-odbc-debuginfoUpgrade php-xmlrpcUpgrade php-gdUpgrade php-debugsource | Mar 12, 2024 | Nov 21, 2019 |
| Suse | — | Upgrade libonig4Upgrade oniguruma-devel | Aug 9, 2024 | Nov 21, 2019 |
| Ubuntu | — | Upgrade libonig4 (Ubuntu Pro)Upgrade libonig2 (Ubuntu Pro) | Aug 18, 2020 | Nov 21, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub