Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-processUpgrade php-soapUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-pecl-apcu-develUpgrade php-gdUpgrade libzip-toolsUpgrade php-pecl-rrdUpgrade php-enchantUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-embeddedUpgrade php-recodeUpgrade php-pecl-zipUpgrade php-dbaUpgrade libzip-develUpgrade php-pearUpgrade php-bcmathUpgrade php-cliUpgrade php-snmpUpgrade phpUpgrade apcu-panelUpgrade php-ldapUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-xmlUpgrade php-jsonUpgrade php-pgsqlUpgrade php-develUpgrade php-intlUpgrade php-gmpUpgrade php-odbcUpgrade php-pecl-apcuUpgrade libzipUpgrade php-pdoUpgrade php-dbgUpgrade php-common | May 4, 2022 | Nov 25, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Jan 3, 2020 | Nov 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade oniguruma-develUpgrade oniguruma-debuginfoUpgrade oniguruma | Apr 27, 2020 | Nov 25, 2019 |
| Centos_linux | — | Upgrade php-odbcUpgrade php-intl-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-commonUpgrade php-process-debuginfoUpgrade php-pgsqlUpgrade php-develUpgrade php-xmlrpc-debuginfoUpgrade php-xmlrpcUpgrade php-enchant-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-debuginfoUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-dba-debuginfoUpgrade php-common-debuginfoUpgrade php-pearUpgrade php-gmpUpgrade php-snmp-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-opcache-debuginfoUpgrade php-jsonUpgrade php-pecl-xdebug-debugsourceUpgrade php-dbgUpgrade php-cli-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-dbaUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-pecl-apcu-debugsourceUpgrade php-pdoUpgrade libzip-debugsourceUpgrade php-fpm-debuginfoUpgrade php-odbc-debuginfoUpgrade libzip-debuginfoUpgrade php-cliUpgrade php-soap-debuginfoUpgrade php-debugsourceUpgrade php-pecl-rrdUpgrade php-embedded-debuginfoUpgrade php-snmpUpgrade php-opcacheUpgrade php-bcmath-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-gdUpgrade php-bcmathUpgrade php-recode-debuginfoUpgrade libzipUpgrade php-recodeUpgrade php-xmlUpgrade php-mysqlndUpgrade libzip-develUpgrade php-ldapUpgrade php-gd-debuginfoUpgrade php-processUpgrade php-intlUpgrade php-pgsql-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-zipUpgrade php-enchantUpgrade apcu-panelUpgrade php-dbg-debuginfoUpgrade php-embeddedUpgrade php-pecl-apcuUpgrade libzip-toolsUpgrade phpUpgrade php-pecl-rrd-debugsource | Sep 9, 2020 | Nov 25, 2019 |
| Debian | — | Upgrade libonig | Dec 5, 2019 | Nov 25, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-gdUpgrade phpUpgrade php-processUpgrade php-recodeUpgrade php-soapUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-xmlUpgrade php-commonUpgrade php-mysqlUpgrade php-ldapUpgrade php-pgsqlUpgrade php-odbcUpgrade php-cli | Nov 3, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-mysqlUpgrade php-xmlrpcUpgrade php-commonUpgrade php-pdoUpgrade php-pgsqlUpgrade php-soapUpgrade php-odbcUpgrade php-recodeUpgrade php-gdUpgrade php-xmlUpgrade php-ldapUpgrade php-cliUpgrade php-processUpgrade php | Sep 28, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-mysqlUpgrade php-odbcUpgrade php-soapUpgrade php-pgsqlUpgrade php-gdUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-commonUpgrade phpUpgrade php-cliUpgrade php-xmlUpgrade php-processUpgrade php-ldapUpgrade php-recode | Feb 24, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Jan 3, 2020 | Nov 25, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.4-11.4.17.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Nov 25, 2019 |
| Oracle_linux | — | Upgrade php-pecl-rrdUpgrade php-processUpgrade php-pearUpgrade php-jsonUpgrade php-gmpUpgrade php-embeddedUpgrade libzip-toolsUpgrade php-pdoUpgrade php-soapUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-develUpgrade php-enchantUpgrade php-pecl-zipUpgrade php-mbstringUpgrade php-dbaUpgrade php-gdUpgrade phpUpgrade php-mysqlndUpgrade php-bcmathUpgrade php-opcacheUpgrade php-xmlrpcUpgrade libzipUpgrade php-cliUpgrade php-recodeUpgrade apcu-panelUpgrade php-pgsqlUpgrade php-odbcUpgrade php-pecl-apcuUpgrade libzip-develUpgrade php-fpmUpgrade php-dbgUpgrade php-ldapUpgrade php-develUpgrade php-intlUpgrade php-snmpUpgrade php-xmlUpgrade php-common | Sep 10, 2020 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade php-pecl-xdebug-debugsourceUpgrade php-gd-debuginfoUpgrade php-jsonUpgrade php-xmlrpcUpgrade php-pearUpgrade php-debugsourceUpgrade php-develUpgrade php-fpmUpgrade php-pecl-zip-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-apcuUpgrade php-snmpUpgrade php-commonUpgrade php-dbgUpgrade php-dbg-debuginfoUpgrade php-pdoUpgrade php-recodeUpgrade php-mysqlnd-debuginfoUpgrade libzipUpgrade php-odbc-debuginfoUpgrade php-enchantUpgrade php-bcmathUpgrade php-pecl-rrd-debuginfoUpgrade php-mbstringUpgrade php-xmlUpgrade php-cliUpgrade php-pecl-xdebugUpgrade php-pecl-zip-debugsourceUpgrade php-gmpUpgrade php-common-debuginfoUpgrade php-ldapUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-enchant-debuginfoNo solution existsUpgrade php-processUpgrade php-pecl-apcu-develUpgrade php-bcmath-debuginfoUpgrade libzip-develUpgrade php-process-debuginfoUpgrade php-gdUpgrade php-snmp-debuginfoUpgrade php-odbcUpgrade php-intl-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pgsqlUpgrade apcu-panelUpgrade libzip-debugsourceUpgrade php-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-opcacheUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-soapUpgrade phpUpgrade php-pecl-apcu-debuginfoUpgrade libzip-toolsUpgrade libzip-tools-debuginfoUpgrade php-pdo-debuginfoUpgrade php-xml-debuginfoUpgrade php-gmp-debuginfoUpgrade php-json-debuginfoUpgrade libzip-debuginfoUpgrade php-fpm-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-embeddedUpgrade php-cli-debuginfoUpgrade php-intlUpgrade php-pecl-rrdUpgrade php-embedded-debuginfoUpgrade php-dbaUpgrade php-mysqlndUpgrade php-dba-debuginfoUpgrade php-soap-debuginfo | Sep 9, 2020 | Nov 25, 2019 |
| Rocky_linux | — | Upgrade php-dbg-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pdo-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-ldap-debuginfoUpgrade libzip-toolsUpgrade php-intl-debuginfoUpgrade php-xmlrpcUpgrade php-process-debuginfoUpgrade libzip-debugsourceUpgrade php-intlUpgrade php-recodeUpgrade php-pecl-apcu-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-processUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-pgsql-debuginfoUpgrade php-pecl-rrdUpgrade php-mbstringUpgrade php-mysqlndUpgrade php-opcacheUpgrade php-pecl-rrd-debuginfoUpgrade php-soap-debuginfoUpgrade php-debuginfoUpgrade libzip-develUpgrade php-opcache-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-gdUpgrade php-cli-debuginfoUpgrade php-dbaUpgrade php-xmlUpgrade php-gmpUpgrade php-jsonUpgrade php-dba-debuginfoUpgrade php-enchantUpgrade phpUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade php-embeddedUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-gmp-debuginfoUpgrade php-fpmUpgrade php-embedded-debuginfoUpgrade php-ldapUpgrade php-cliUpgrade php-recode-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-debugsourceUpgrade php-enchant-debuginfoUpgrade php-pdoUpgrade php-snmpUpgrade php-dbgUpgrade libzip-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcu-debugsourceUpgrade php-commonUpgrade php-pecl-zipUpgrade php-gd-debuginfoUpgrade php-pecl-xdebugUpgrade php-develUpgrade php-odbcUpgrade php-xmlrpc-debuginfoUpgrade php-xml-debuginfoUpgrade php-fpm-debuginfoUpgrade php-common-debuginfoUpgrade php-odbc-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade libzip | Mar 12, 2024 | Nov 25, 2019 |
| Suse | — | Upgrade libonig4Upgrade oniguruma-devel | Aug 9, 2024 | Nov 25, 2019 |
| Ubuntu | — | Upgrade libonig4 (Ubuntu Pro)Upgrade libonig2 (Ubuntu Pro) | Aug 18, 2020 | Nov 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub