Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-develUpgrade apcu-panelUpgrade php-pgsqlUpgrade php-odbcUpgrade php-xmlUpgrade phpUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade php-jsonUpgrade php-pearUpgrade php-fpmUpgrade libzip-develUpgrade libzipUpgrade php-bcmathUpgrade php-ldapUpgrade php-dbgUpgrade php-intlUpgrade php-snmpUpgrade php-commonUpgrade php-cliUpgrade php-pecl-apcuUpgrade php-gmpUpgrade libzip-toolsUpgrade php-recodeUpgrade php-soapUpgrade php-mbstringUpgrade php-processUpgrade php-dbaUpgrade php-mysqlndUpgrade php-xmlrpcUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-gdUpgrade php-embeddedUpgrade php-pecl-rrdUpgrade php-pecl-zipUpgrade php-opcache | May 4, 2022 | Nov 25, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Jan 3, 2020 | Nov 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade oniguruma-develUpgrade oniguruma-debuginfoUpgrade oniguruma | Apr 27, 2020 | Nov 25, 2019 |
| Centos_linux | — | Upgrade php-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-dbgUpgrade php-mysqlnd-debuginfoUpgrade php-pdoUpgrade php-intl-debuginfoUpgrade php-pearUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebugUpgrade php-odbc-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-fpm-debuginfoUpgrade php-xml-debuginfoUpgrade php-jsonUpgrade php-enchant-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-cli-debuginfoUpgrade php-xmlrpcUpgrade libzip-debuginfoUpgrade php-gmpUpgrade php-json-debuginfoUpgrade php-dbaUpgrade php-mbstring-debuginfoUpgrade libzip-debugsourceUpgrade php-common-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-snmp-debuginfoUpgrade php-commonUpgrade php-fpmUpgrade php-opcache-debuginfoUpgrade php-develUpgrade php-process-debuginfoUpgrade php-dba-debuginfoUpgrade php-odbcUpgrade php-pecl-zip-debuginfoUpgrade php-soapUpgrade php-pgsqlUpgrade php-mbstringUpgrade php-pdo-debuginfoUpgrade php-cliUpgrade php-gdUpgrade libzipUpgrade php-pecl-zipUpgrade php-pgsql-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-toolsUpgrade php-intlUpgrade php-recodeUpgrade php-processUpgrade php-mysqlndUpgrade php-recode-debuginfoUpgrade php-snmpUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade libzip-develUpgrade php-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcuUpgrade php-embedded-debuginfoUpgrade php-xmlUpgrade php-pecl-rrdUpgrade phpUpgrade php-ldapUpgrade php-enchantUpgrade php-embeddedUpgrade apcu-panelUpgrade php-dbg-debuginfoUpgrade php-ldap-debuginfoUpgrade php-gd-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-bcmath | Sep 9, 2020 | Nov 25, 2019 |
| Debian | — | Upgrade libonig | Dec 5, 2019 | Nov 25, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-xmlrpcUpgrade php-gdUpgrade php-processUpgrade php-soapUpgrade php-pdoUpgrade php-recodeUpgrade phpUpgrade php-mysqlUpgrade php-odbcUpgrade php-pgsqlUpgrade php-xmlUpgrade php-ldapUpgrade php-commonUpgrade php-cli | Nov 3, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-mysqlUpgrade php-odbcUpgrade php-commonUpgrade php-soapUpgrade php-pdoUpgrade php-cliUpgrade php-recodeUpgrade php-processUpgrade phpUpgrade php-ldapUpgrade php-xmlUpgrade php-gd | Sep 28, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade phpUpgrade php-cliUpgrade php-xmlUpgrade php-recodeUpgrade php-ldapUpgrade php-processUpgrade php-gdUpgrade php-mysqlUpgrade php-odbcUpgrade php-soapUpgrade php-xmlrpcUpgrade php-commonUpgrade php-pgsqlUpgrade php-pdo | Feb 24, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Jan 3, 2020 | Nov 25, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.4-11.4.17.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Nov 25, 2019 |
| Oracle_linux | — | Upgrade php-odbcUpgrade php-pecl-apcuUpgrade php-xmlUpgrade php-commonUpgrade php-ldapUpgrade php-pgsqlUpgrade libzip-develUpgrade php-snmpUpgrade php-fpmUpgrade php-intlUpgrade apcu-panelUpgrade php-develUpgrade php-dbgUpgrade php-pearUpgrade php-opcacheUpgrade php-jsonUpgrade php-soapUpgrade php-dbaUpgrade php-pecl-xdebugUpgrade php-mbstringUpgrade php-gmpUpgrade php-mysqlndUpgrade php-pecl-zipUpgrade php-recodeUpgrade php-cliUpgrade php-xmlrpcUpgrade phpUpgrade libzip-toolsUpgrade php-processUpgrade php-pdoUpgrade php-pecl-rrdUpgrade php-gdUpgrade libzipUpgrade php-pecl-apcu-develUpgrade php-embeddedUpgrade php-bcmathUpgrade php-enchant | Sep 10, 2020 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade php-processUpgrade php-dba-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzip-tools-debuginfoUpgrade libzip-debuginfoUpgrade php-pgsqlUpgrade php-embedded-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-rrdUpgrade php-snmp-debuginfoUpgrade apcu-panelUpgrade php-mbstring-debuginfoUpgrade php-json-debuginfoUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade libzip-develUpgrade php-intlUpgrade php-fpm-debuginfoUpgrade phpUpgrade php-ldap-debuginfoUpgrade php-opcacheUpgrade php-pecl-apcu-debugsourceUpgrade php-debuginfoUpgrade php-odbcUpgrade php-gdUpgrade php-gmp-debuginfoUpgrade php-xml-debuginfoUpgrade php-embeddedUpgrade php-dbaUpgrade php-opcache-debuginfoUpgrade php-intl-debuginfoUpgrade libzip-toolsUpgrade php-pdo-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-mysqlndUpgrade php-process-debuginfoUpgrade libzip-debugsourceUpgrade php-gmpUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcuUpgrade php-common-debuginfoNo solution existsUpgrade php-xmlUpgrade php-develUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-dbgUpgrade libzipUpgrade php-recode-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-gd-debuginfoUpgrade php-snmpUpgrade php-dbg-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-enchant-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-jsonUpgrade php-mbstringUpgrade php-cliUpgrade php-mysqlnd-debuginfoUpgrade php-odbc-debuginfoUpgrade php-debugsourceUpgrade php-commonUpgrade php-pecl-zip-debuginfoUpgrade php-recodeUpgrade php-pecl-zipUpgrade php-pearUpgrade php-bcmathUpgrade php-enchantUpgrade php-pdo | Sep 9, 2020 | Nov 25, 2019 |
| Rocky_linux | — | Upgrade php-pecl-rrd-debugsourceUpgrade libzipUpgrade php-pecl-xdebug-debugsourceUpgrade php-xml-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zipUpgrade php-xmlUpgrade php-pecl-zip-debuginfoUpgrade php-gd-debuginfoUpgrade php-odbcUpgrade php-cliUpgrade php-ldapUpgrade php-embedded-debuginfoUpgrade php-enchant-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-recode-debuginfoUpgrade php-json-debuginfoUpgrade php-pdoUpgrade php-debugsourceUpgrade php-fpm-debuginfoUpgrade php-commonUpgrade php-common-debuginfoUpgrade php-gmpUpgrade php-odbc-debuginfoUpgrade php-fpmUpgrade php-gmp-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debuginfoUpgrade phpUpgrade php-embeddedUpgrade php-bcmathUpgrade php-dba-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-debugsourceUpgrade php-develUpgrade php-pgsqlUpgrade php-enchantUpgrade libzip-debuginfoUpgrade php-snmpUpgrade php-dbgUpgrade php-jsonUpgrade php-mysqlnd-debuginfoUpgrade php-mysqlndUpgrade php-mbstringUpgrade php-snmp-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-ldap-debuginfoUpgrade php-intlUpgrade php-gdUpgrade php-debuginfoUpgrade php-pecl-rrdUpgrade php-cli-debuginfoUpgrade php-xmlrpcUpgrade php-intl-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-recodeUpgrade php-pecl-apcu-develUpgrade php-processUpgrade php-dbaUpgrade libzip-debugsourceUpgrade php-dbg-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-process-debuginfoUpgrade libzip-toolsUpgrade php-bcmath-debuginfoUpgrade php-soapUpgrade php-pecl-rrd-debuginfoUpgrade php-opcacheUpgrade libzip-develUpgrade php-soap-debuginfo | Mar 12, 2024 | Nov 25, 2019 |
| Suse | — | Upgrade libonig4Upgrade oniguruma-devel | Aug 9, 2024 | Nov 25, 2019 |
| Ubuntu | — | Upgrade libonig2 (Ubuntu Pro)Upgrade libonig4 (Ubuntu Pro) | Aug 18, 2020 | Nov 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub