Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-mysqlndUpgrade php-xmlrpcUpgrade libzip-toolsUpgrade php-enchantUpgrade php-dbaUpgrade php-gdUpgrade php-recodeUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-mbstringUpgrade php-processUpgrade php-opcacheUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-pecl-rrdUpgrade php-pecl-xdebugUpgrade php-snmpUpgrade php-pgsqlUpgrade php-xmlUpgrade libzip-develUpgrade php-ldapUpgrade php-fpmUpgrade php-odbcUpgrade php-bcmathUpgrade php-develUpgrade php-dbgUpgrade libzipUpgrade php-pdoUpgrade php-gmpUpgrade php-pearUpgrade php-intlUpgrade php-cliUpgrade php-pecl-apcuUpgrade php-jsonUpgrade apcu-panelUpgrade phpUpgrade php-common | May 4, 2022 | Nov 25, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Jan 3, 2020 | Nov 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade oniguruma-debuginfoUpgrade oniguruma-develUpgrade oniguruma | Apr 27, 2020 | Nov 25, 2019 |
| Centos_linux | — | Upgrade php-bcmathUpgrade php-intlUpgrade php-recode-debuginfoUpgrade php-gdUpgrade php-recodeUpgrade libzip-develUpgrade php-mysqlndUpgrade php-xmlUpgrade php-pecl-rrdUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-rrd-debugsourceUpgrade apcu-panelUpgrade php-snmpUpgrade php-gmp-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-ldap-debuginfoUpgrade php-processUpgrade php-pecl-zipUpgrade libzip-toolsUpgrade php-dbg-debuginfoUpgrade php-enchantUpgrade php-embeddedUpgrade php-opcacheUpgrade phpUpgrade libzipUpgrade php-soap-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-gd-debuginfoUpgrade php-ldapUpgrade php-debugsourceUpgrade php-cliUpgrade php-pgsqlUpgrade libzip-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcu-develUpgrade php-mbstring-debuginfoUpgrade php-odbcUpgrade php-xmlrpc-debuginfoUpgrade php-cli-debuginfoUpgrade php-common-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-xml-debuginfoUpgrade php-pearUpgrade php-fpm-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-xdebugUpgrade php-gmpUpgrade libzip-debugsourceUpgrade php-enchant-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-xmlrpcUpgrade php-pecl-zip-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-dbgUpgrade php-commonUpgrade php-pdo-debuginfoUpgrade php-pdoUpgrade php-snmp-debuginfoUpgrade php-dbaUpgrade php-jsonUpgrade php-opcache-debuginfoUpgrade php-mbstringUpgrade libzip-tools-debuginfoUpgrade php-intl-debuginfoUpgrade php-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-dba-debuginfoUpgrade php-develUpgrade php-fpmUpgrade php-soap | Sep 9, 2020 | Nov 25, 2019 |
| Debian | — | Upgrade libonig | Dec 5, 2019 | Nov 25, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-recodeUpgrade php-xmlrpcUpgrade php-soapUpgrade phpUpgrade php-pdoUpgrade php-gdUpgrade php-processUpgrade php-odbcUpgrade php-cliUpgrade php-xmlUpgrade php-pgsqlUpgrade php-ldapUpgrade php-mysqlUpgrade php-common | Nov 3, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade phpUpgrade php-processUpgrade php-cliUpgrade php-xmlUpgrade php-recodeUpgrade php-gdUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-odbcUpgrade php-commonUpgrade php-mysqlUpgrade php-soapUpgrade php-pgsql | Sep 28, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-processUpgrade php-cliUpgrade phpUpgrade php-ldapUpgrade php-recodeUpgrade php-xmlUpgrade php-odbcUpgrade php-soapUpgrade php-commonUpgrade php-pdoUpgrade php-gdUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php-pgsql | Feb 24, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | Jan 3, 2020 | Nov 25, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.4-11.4.17.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Nov 25, 2019 |
| Oracle_linux | — | Upgrade apcu-panelUpgrade libzip-develUpgrade php-fpmUpgrade php-pgsqlUpgrade php-commonUpgrade php-dbgUpgrade php-ldapUpgrade php-pecl-apcuUpgrade php-xmlUpgrade php-odbcUpgrade php-develUpgrade php-snmpUpgrade php-intlUpgrade php-pecl-xdebugUpgrade php-pecl-rrdUpgrade php-pdoUpgrade php-processUpgrade php-dbaUpgrade php-enchantUpgrade php-recodeUpgrade php-pecl-apcu-develUpgrade php-gdUpgrade libzipUpgrade php-opcacheUpgrade php-xmlrpcUpgrade php-pearUpgrade php-gmpUpgrade php-soapUpgrade php-embeddedUpgrade php-bcmathUpgrade php-mysqlndUpgrade php-jsonUpgrade php-cliUpgrade php-mbstringUpgrade phpUpgrade libzip-toolsUpgrade php-pecl-zip | Sep 10, 2020 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade php-pecl-xdebug-debugsourceUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug-debuginfoUpgrade php-cliUpgrade php-snmpUpgrade php-jsonUpgrade php-dbg-debuginfoUpgrade php-commonUpgrade php-pearNo solution existsUpgrade php-pecl-zipUpgrade php-develUpgrade php-pecl-zip-debugsourceUpgrade php-enchantUpgrade php-debugsourceUpgrade php-enchant-debuginfoUpgrade php-ldapUpgrade php-bcmathUpgrade php-dbgUpgrade php-odbc-debuginfoUpgrade php-gd-debuginfoUpgrade php-recodeUpgrade php-mysqlnd-debuginfoUpgrade php-recode-debuginfoUpgrade libzipUpgrade php-pecl-zip-debuginfoUpgrade php-fpmUpgrade php-common-debuginfoUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-pecl-rrd-debuginfoUpgrade php-gmpUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-xmlrpc-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-rrdUpgrade php-xml-debuginfoUpgrade php-processUpgrade php-intlUpgrade php-process-debuginfoUpgrade phpUpgrade php-gdUpgrade php-pecl-apcu-debuginfoUpgrade php-opcacheUpgrade php-ldap-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-cli-debuginfoUpgrade php-fpm-debuginfoUpgrade libzip-toolsUpgrade php-gmp-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-mysqlndUpgrade php-pgsql-debuginfoUpgrade php-soap-debuginfoUpgrade php-snmp-debuginfoUpgrade libzip-debugsourceUpgrade php-json-debuginfoUpgrade php-dbaUpgrade libzip-debuginfoUpgrade php-embedded-debuginfoUpgrade libzip-develUpgrade php-debuginfoUpgrade php-dba-debuginfoUpgrade php-soapUpgrade php-odbcUpgrade php-pgsqlUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcu-develUpgrade apcu-panelUpgrade php-bcmath-debuginfoUpgrade php-pdo-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-embedded | Sep 9, 2020 | Nov 25, 2019 |
| Rocky_linux | — | Upgrade php-pecl-zip-debuginfoUpgrade php-gd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-xdebug-debugsourceUpgrade php-xmlUpgrade libzipUpgrade php-odbcUpgrade php-pecl-xdebugUpgrade php-commonUpgrade php-pdoUpgrade php-common-debuginfoUpgrade php-odbc-debuginfoUpgrade php-ldapUpgrade php-recode-debuginfoUpgrade php-enchant-debuginfoUpgrade php-cliUpgrade php-xml-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dba-debuginfoUpgrade php-dbgUpgrade php-json-debuginfoUpgrade php-embedded-debuginfoUpgrade php-debugsourceUpgrade php-gmp-debuginfoUpgrade php-embeddedUpgrade php-gmpUpgrade php-snmpUpgrade php-pecl-zip-debugsourceUpgrade phpUpgrade php-bcmathUpgrade libzip-debuginfoUpgrade php-pecl-apcuUpgrade php-enchantUpgrade php-develUpgrade php-fpmUpgrade php-pecl-xdebug-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcu-debugsourceUpgrade php-jsonUpgrade php-recodeUpgrade php-pgsql-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-rrdUpgrade libzip-develUpgrade php-pdo-debuginfoUpgrade php-process-debuginfoUpgrade php-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-processUpgrade php-dbg-debuginfoUpgrade libzip-debugsourceUpgrade php-dbaUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-develUpgrade php-intlUpgrade php-gdUpgrade php-cli-debuginfoUpgrade php-soap-debuginfoUpgrade php-soapUpgrade php-pecl-rrd-debuginfoUpgrade php-opcacheUpgrade php-bcmath-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mbstringUpgrade php-intl-debuginfoUpgrade php-mysqlndUpgrade libzip-toolsUpgrade php-snmp-debuginfoUpgrade php-xmlrpcUpgrade libzip-tools-debuginfo | Mar 12, 2024 | Nov 25, 2019 |
| Suse | — | Upgrade oniguruma-develUpgrade libonig4 | Aug 9, 2024 | Nov 25, 2019 |
| Ubuntu | — | Upgrade libonig2 (Ubuntu Pro)Upgrade libonig4 (Ubuntu Pro) | Aug 18, 2020 | Nov 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub