Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-recodeUpgrade php-processUpgrade php-soapUpgrade php-dbaUpgrade php-pecl-zipUpgrade php-xmlrpcUpgrade php-embeddedUpgrade php-opcacheUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-gdUpgrade php-enchantUpgrade php-pdoUpgrade apcu-panelUpgrade php-dbgUpgrade php-develUpgrade php-pecl-apcuUpgrade php-intlUpgrade php-xmlUpgrade php-pecl-xdebugUpgrade php-pgsqlUpgrade php-odbcUpgrade libzipUpgrade php-snmpUpgrade php-cliUpgrade php-pearUpgrade php-bcmathUpgrade php-gmpUpgrade php-commonUpgrade libzip-develUpgrade php-fpmUpgrade php-ldapUpgrade php-jsonUpgrade php | May 4, 2022 | Nov 25, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Jan 3, 2020 | Nov 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade onigurumaUpgrade oniguruma-debuginfoUpgrade oniguruma-devel | Apr 27, 2020 | Nov 25, 2019 |
| Centos_linux | — | Upgrade php-mbstringUpgrade php-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-apcu-debugsourceUpgrade php-commonUpgrade php-pdo-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-dbgUpgrade php-soapUpgrade php-pecl-zip-debuginfoUpgrade php-dba-debuginfoUpgrade php-pearUpgrade php-pecl-xdebug-debuginfoUpgrade php-fpm-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-xdebugUpgrade php-xml-debuginfoUpgrade php-jsonUpgrade php-xmlrpcUpgrade php-enchant-debuginfoUpgrade php-snmp-debuginfoUpgrade libzip-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-opcache-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-pgsqlUpgrade php-cli-debuginfoUpgrade php-fpmUpgrade php-dbaUpgrade php-process-debuginfoUpgrade php-common-debuginfoUpgrade libzip-debugsourceUpgrade php-odbc-debuginfoUpgrade php-gmpUpgrade php-develUpgrade php-odbcUpgrade php-pdoUpgrade php-embeddedUpgrade libzip-toolsUpgrade php-pgsql-debuginfoUpgrade php-processUpgrade php-ldap-debuginfoUpgrade php-enchantUpgrade php-pecl-zipUpgrade php-intlUpgrade php-gdUpgrade php-debugsourceUpgrade php-opcacheUpgrade php-pecl-rrdUpgrade php-snmpUpgrade php-mysqlndUpgrade php-embedded-debuginfoUpgrade php-ldapUpgrade php-xmlUpgrade libzip-develUpgrade php-pecl-apcuUpgrade apcu-panelUpgrade php-gmp-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-gd-debuginfoUpgrade libzipUpgrade php-bcmathUpgrade php-cliUpgrade php-bcmath-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-recode-debuginfoUpgrade phpUpgrade php-recodeUpgrade php-dbg-debuginfo | Sep 9, 2020 | Nov 25, 2019 |
| Debian | — | Upgrade libonig | Dec 5, 2019 | Nov 25, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-gdUpgrade php-xmlrpcUpgrade php-recodeUpgrade php-soapUpgrade php-processUpgrade php-pdoUpgrade phpUpgrade php-mysqlUpgrade php-xmlUpgrade php-odbcUpgrade php-commonUpgrade php-pgsqlUpgrade php-cliUpgrade php-ldap | Nov 3, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-cliUpgrade php-processUpgrade php-xmlUpgrade php-gdUpgrade phpUpgrade php-recodeUpgrade php-ldapUpgrade php-soapUpgrade php-mysqlUpgrade php-commonUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-odbcUpgrade php-pgsql | Sep 28, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-pdoUpgrade php-pgsqlUpgrade php-odbcUpgrade php-soapUpgrade php-commonUpgrade php-gdUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-ldapUpgrade php-recodeUpgrade phpUpgrade php-processUpgrade php-xmlUpgrade php-cli | Feb 24, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | Jan 3, 2020 | Nov 25, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.4-11.4.17.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Nov 25, 2019 |
| Oracle_linux | — | Upgrade php-xmlUpgrade php-fpmUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-pgsqlUpgrade php-ldapUpgrade php-snmpUpgrade libzip-develUpgrade apcu-panelUpgrade php-odbcUpgrade php-commonUpgrade php-intlUpgrade php-develUpgrade php-opcacheUpgrade php-bcmathUpgrade php-embeddedUpgrade php-pecl-zipUpgrade php-dbaUpgrade php-soapUpgrade php-xmlrpcUpgrade php-pearUpgrade php-gmpUpgrade php-cliUpgrade libzipUpgrade php-processUpgrade php-pdoUpgrade libzip-toolsUpgrade php-pecl-rrdUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade phpUpgrade php-recodeUpgrade php-jsonUpgrade php-pecl-xdebugUpgrade php-gdUpgrade php-enchantUpgrade php-mysqlnd | Sep 10, 2020 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade php-mbstring-debuginfoUpgrade php-process-debuginfoUpgrade libzip-develUpgrade php-pecl-apcu-debuginfoUpgrade php-intlUpgrade php-ldap-debuginfoUpgrade php-soap-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dbaUpgrade php-opcacheUpgrade php-json-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-mysqlndUpgrade php-embeddedUpgrade php-gmp-debuginfoUpgrade php-snmp-debuginfoUpgrade php-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-opcache-debuginfoUpgrade php-odbcUpgrade libzip-tools-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-debuginfoUpgrade php-pdo-debuginfoUpgrade php-cli-debuginfoUpgrade apcu-panelUpgrade phpUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade libzip-toolsUpgrade php-processUpgrade php-embedded-debuginfoUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-intl-debuginfoUpgrade php-xml-debuginfoUpgrade php-gdUpgrade libzip-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-ldapUpgrade php-mysqlnd-debuginfoUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-gd-debuginfoUpgrade php-recode-debuginfoUpgrade php-odbc-debuginfoUpgrade php-bcmathUpgrade php-common-debuginfoUpgrade php-recodeUpgrade libzipUpgrade php-commonUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-snmpUpgrade php-gmpUpgrade php-xmlrpc-debuginfoUpgrade php-xmlrpcUpgrade php-enchantUpgrade php-pecl-xdebug-debugsourceUpgrade php-dbgUpgrade php-pecl-xdebugUpgrade php-dbg-debuginfoUpgrade php-mbstringUpgrade php-fpmUpgrade php-pecl-xdebug-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pdoUpgrade php-pearUpgrade php-jsonUpgrade php-cliNo solution existsUpgrade php-develUpgrade php-pecl-zip-debuginfoUpgrade php-debugsourceUpgrade php-pecl-zip | Sep 9, 2020 | Nov 25, 2019 |
| Rocky_linux | — | Upgrade php-ldapUpgrade php-enchant-debuginfoUpgrade php-embedded-debuginfoUpgrade php-cliUpgrade php-pdoUpgrade php-commonUpgrade php-odbc-debuginfoUpgrade php-fpm-debuginfoUpgrade php-common-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-json-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-bcmathUpgrade php-dba-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debuginfoUpgrade php-enchantUpgrade php-embeddedUpgrade php-pecl-zip-debugsourceUpgrade php-dbgUpgrade php-pgsqlUpgrade php-gmp-debuginfoUpgrade php-gmpUpgrade php-pecl-apcu-debugsourceUpgrade php-jsonUpgrade libzip-debuginfoUpgrade php-snmpUpgrade phpUpgrade php-fpmUpgrade php-recode-debuginfoUpgrade php-develUpgrade php-xmlUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-zipUpgrade libzipUpgrade php-gd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-odbcUpgrade php-pecl-xdebugUpgrade php-debugsourceUpgrade php-mysqlndUpgrade php-pecl-apcu-develUpgrade libzip-toolsUpgrade php-snmp-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-mbstringUpgrade php-recodeUpgrade php-pecl-rrd-debuginfoUpgrade php-process-debuginfoUpgrade php-soap-debuginfoUpgrade php-opcache-debuginfoUpgrade php-opcacheUpgrade php-soapUpgrade php-intl-debuginfoUpgrade php-dbg-debuginfoUpgrade php-xmlrpcUpgrade libzip-debugsourceUpgrade php-pecl-rrdUpgrade php-cli-debuginfoUpgrade php-processUpgrade php-pecl-apcu-debuginfoUpgrade php-dbaUpgrade php-gdUpgrade libzip-tools-debuginfoUpgrade php-intlUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade php-pdo-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-devel | Mar 12, 2024 | Nov 25, 2019 |
| Suse | — | Upgrade libonig4Upgrade oniguruma-devel | Aug 9, 2024 | Nov 25, 2019 |
| Ubuntu | — | Upgrade libonig4 (Ubuntu Pro)Upgrade libonig2 (Ubuntu Pro) | Aug 18, 2020 | Nov 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub