Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pecl-apcuUpgrade php-gmpUpgrade php-odbcUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-develUpgrade php-commonUpgrade php-jsonUpgrade php-ldapUpgrade libzip-develUpgrade phpUpgrade apcu-panelUpgrade php-snmpUpgrade php-cliUpgrade php-pgsqlUpgrade libzipUpgrade php-xmlUpgrade php-pearUpgrade php-pdoUpgrade php-intlUpgrade php-bcmathUpgrade php-dbgUpgrade php-processUpgrade php-xmlrpcUpgrade php-opcacheUpgrade php-pecl-zipUpgrade libzip-toolsUpgrade php-soapUpgrade php-recodeUpgrade php-mysqlndUpgrade php-pecl-rrdUpgrade php-enchantUpgrade php-gdUpgrade php-embeddedUpgrade php-pecl-apcu-develUpgrade php-mbstringUpgrade php-dba | May 4, 2022 | Nov 25, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Jan 3, 2020 | Nov 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade oniguruma-debuginfoUpgrade oniguruma-develUpgrade oniguruma | Apr 27, 2020 | Nov 25, 2019 |
| Centos_linux | — | Upgrade php-dbg-debuginfoUpgrade php-pecl-zipUpgrade php-xmlUpgrade php-cliUpgrade php-ldap-debuginfoUpgrade apcu-panelUpgrade php-embedded-debuginfoUpgrade php-embeddedUpgrade phpUpgrade php-enchantUpgrade libzipUpgrade php-gd-debuginfoUpgrade php-bcmathUpgrade php-gmp-debuginfoUpgrade libzip-develUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-pecl-apcu-debuginfoUpgrade php-processUpgrade php-pgsql-debuginfoUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-pecl-apcuUpgrade php-ldapUpgrade php-pecl-rrd-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-recodeUpgrade php-soap-debuginfoUpgrade php-snmpUpgrade php-debugsourceUpgrade php-gdUpgrade php-recode-debuginfoUpgrade php-intlUpgrade php-pecl-zip-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade libzip-debugsourceUpgrade php-odbcUpgrade php-dbgUpgrade php-commonUpgrade php-pdo-debuginfoUpgrade php-intl-debuginfoUpgrade php-pgsqlUpgrade php-process-debuginfoUpgrade php-mbstringUpgrade php-debuginfoUpgrade php-json-debuginfoUpgrade php-fpmUpgrade php-common-debuginfoUpgrade php-dbaUpgrade php-pecl-zip-debuginfoUpgrade php-snmp-debuginfoUpgrade php-gmpUpgrade php-soapUpgrade php-pearUpgrade php-dba-debuginfoUpgrade php-opcache-debuginfoUpgrade php-jsonUpgrade php-xmlrpc-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-cli-debuginfoUpgrade php-enchant-debuginfoUpgrade libzip-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebugUpgrade php-develUpgrade php-pdoUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-devel | Sep 9, 2020 | Nov 25, 2019 |
| Debian | — | Upgrade libonig | Dec 5, 2019 | Nov 25, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-pgsqlUpgrade php-commonUpgrade php-mysqlUpgrade php-xmlUpgrade php-cliUpgrade php-ldapUpgrade php-odbcUpgrade php-processUpgrade php-soapUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-gdUpgrade php-pdoUpgrade php | Nov 3, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-xmlrpcUpgrade php-odbcUpgrade php-pdoUpgrade php-mysqlUpgrade php-commonUpgrade php-pgsqlUpgrade php-soapUpgrade phpUpgrade php-gdUpgrade php-processUpgrade php-xmlUpgrade php-ldapUpgrade php-cliUpgrade php-recode | Sep 28, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-processUpgrade php-xmlUpgrade php-recodeUpgrade php-cliUpgrade phpUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-soapUpgrade php-odbcUpgrade php-mysqlUpgrade php-gdUpgrade php-pgsqlUpgrade php-commonUpgrade php-pdo | Feb 24, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-libs | Jan 3, 2020 | Nov 25, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.4-11.4.17.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Nov 25, 2019 |
| Oracle_linux | — | Upgrade php-opcacheUpgrade php-embeddedUpgrade php-bcmathUpgrade libzip-toolsUpgrade php-pecl-rrdUpgrade php-mbstringUpgrade php-jsonUpgrade libzipUpgrade php-dbaUpgrade php-processUpgrade php-mysqlndUpgrade php-pearUpgrade php-xmlrpcUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-recodeUpgrade php-gdUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade php-cliUpgrade phpUpgrade php-xmlUpgrade apcu-panelUpgrade php-fpmUpgrade php-pgsqlUpgrade libzip-develUpgrade php-develUpgrade php-odbcUpgrade php-pecl-apcuUpgrade php-ldapUpgrade php-dbgUpgrade php-intlUpgrade php-snmpUpgrade php-common | Sep 10, 2020 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade php-pecl-zip-debuginfoUpgrade php-debugsourceUpgrade php-pecl-zipUpgrade php-gd-debuginfoUpgrade php-recode-debuginfoUpgrade php-develUpgrade php-ldapUpgrade php-gmpUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-recodeUpgrade php-pdoUpgrade php-commonUpgrade php-enchant-debuginfoUpgrade libzipUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcuUpgrade php-odbc-debuginfoUpgrade php-common-debuginfoUpgrade php-enchantUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade php-dbgUpgrade php-snmpUpgrade php-bcmathUpgrade php-dbg-debuginfoUpgrade php-pecl-xdebugUpgrade php-pearNo solution existsUpgrade php-xmlUpgrade php-fpmUpgrade php-jsonUpgrade php-cliUpgrade php-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-ldap-debuginfoUpgrade libzip-toolsUpgrade php-process-debuginfoUpgrade php-gdUpgrade phpUpgrade php-pecl-rrdUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade libzip-debugsourceUpgrade php-soapUpgrade php-intl-debuginfoUpgrade php-dba-debuginfoUpgrade php-intlUpgrade php-dbaUpgrade libzip-develUpgrade php-mysqlndUpgrade php-pdo-debuginfoUpgrade php-pecl-apcu-develUpgrade libzip-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-opcacheUpgrade apcu-panelUpgrade php-processUpgrade php-odbcUpgrade php-pgsqlUpgrade php-pecl-apcu-debuginfoUpgrade php-json-debuginfoUpgrade php-embeddedUpgrade php-pecl-rrd-debugsourceUpgrade php-fpm-debuginfoUpgrade php-opcache-debuginfoUpgrade php-embedded-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-soap-debuginfoUpgrade php-gmp-debuginfoUpgrade php-snmp-debuginfo | Sep 9, 2020 | Nov 25, 2019 |
| Rocky_linux | — | Upgrade libzip-toolsUpgrade php-snmp-debuginfoUpgrade php-mbstringUpgrade php-intl-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mysqlndUpgrade php-pecl-rrdUpgrade php-processUpgrade libzip-debugsourceUpgrade php-opcacheUpgrade php-xmlrpcUpgrade php-pecl-rrd-debuginfoUpgrade php-dbaUpgrade php-dbg-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-soapUpgrade libzip-develUpgrade php-soap-debuginfoUpgrade php-process-debuginfoUpgrade php-cli-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pgsql-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-intlUpgrade php-pdo-debuginfoUpgrade php-recodeUpgrade php-gdUpgrade php-ldap-debuginfoUpgrade php-common-debuginfoUpgrade libzipUpgrade php-xml-debuginfoUpgrade php-commonUpgrade php-odbc-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-bcmathUpgrade php-odbcUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-zipUpgrade php-fpmUpgrade php-pecl-zip-debugsourceUpgrade php-develUpgrade php-dbgUpgrade php-mbstring-debuginfoUpgrade php-enchant-debuginfoUpgrade php-recode-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-json-debuginfoUpgrade php-cliUpgrade php-ldapUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebugUpgrade php-pgsqlUpgrade php-snmpUpgrade php-pecl-apcu-debugsourceUpgrade php-jsonUpgrade libzip-debuginfoUpgrade php-pdoUpgrade php-debugsourceUpgrade php-xmlUpgrade php-gd-debuginfoUpgrade php-pecl-apcuUpgrade php-gmp-debuginfoUpgrade php-gmpUpgrade php-enchantUpgrade php-embeddedUpgrade php-dba-debuginfoUpgrade phpUpgrade php-pecl-xdebug-debugsourceUpgrade php-xmlrpc-debuginfo | Mar 12, 2024 | Nov 25, 2019 |
| Suse | — | Upgrade libonig4Upgrade oniguruma-devel | Aug 9, 2024 | Nov 25, 2019 |
| Ubuntu | — | Upgrade libonig2 (Ubuntu Pro)Upgrade libonig4 (Ubuntu Pro) | Aug 18, 2020 | Nov 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub