An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in ext/mbstring/oniguruma/regcomp.c, ext/mbstring/oniguruma/regexec.c, ext/mbstring/oniguruma/regparse.c, ext/mbstring/oniguruma/enc/unicode.c, and ext/mbstring/oniguruma/src/utf32_be.c when a multibyte regular expression pattern contains invalid multibyte sequences.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-dbgUpgrade php-mysqlndUpgrade php-mbstringUpgrade php-cliUpgrade apcu-panelUpgrade php-fpmUpgrade php-commonUpgrade php-odbcUpgrade php-pearUpgrade libzip-toolsUpgrade php-xmlrpcUpgrade php-recodeUpgrade libzip-develUpgrade php-opcacheUpgrade php-snmpUpgrade php-ldapUpgrade php-pecl-apcuUpgrade phpUpgrade php-xmlUpgrade libzipUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-pecl-apcu-develUpgrade php-processUpgrade php-develUpgrade php-gdUpgrade php-dbaUpgrade php-intlUpgrade php-gmpUpgrade php-bcmathUpgrade php-pgsqlUpgrade php-enchantUpgrade php-soapUpgrade php-pdoUpgrade php-embedded | May 4, 2022 | Feb 22, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 22, 2019 |
| Centos_linux | — | Upgrade php-snmpUpgrade php-bcmath-debuginfoUpgrade php-enchant-debuginfoUpgrade php-json-debuginfoUpgrade php-mbstringUpgrade php-pecl-zip-debuginfoUpgrade php-recode-debuginfoUpgrade php-xml-debuginfoUpgrade php-soap-debuginfoUpgrade php-common-debuginfoUpgrade php-snmp-debuginfoUpgrade libzip-develUpgrade libzip-toolsUpgrade php-opcacheUpgrade php-mysqlnd-debuginfoUpgrade libzip-debuginfoUpgrade php-intl-debuginfoUpgrade php-debuginfoUpgrade php-xmlUpgrade php-mysqlndUpgrade php-commonUpgrade php-opcache-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-xmlrpcUpgrade php-intlUpgrade php-dbgUpgrade php-cliUpgrade php-mbstring-debuginfoUpgrade php-dba-debuginfoUpgrade apcu-panelUpgrade php-odbcUpgrade php-pecl-apcu-debugsourceUpgrade php-develUpgrade php-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-gmpUpgrade phpUpgrade libzip-debugsourceUpgrade php-cli-debuginfoUpgrade php-soapUpgrade php-pearUpgrade php-pecl-apcu-develUpgrade php-recodeUpgrade libzipUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade php-dbg-debuginfoUpgrade php-pecl-zipUpgrade php-gmp-debuginfoUpgrade php-embedded-debuginfoUpgrade php-processUpgrade php-fpmUpgrade php-odbc-debuginfoUpgrade php-embeddedUpgrade php-pdoUpgrade php-jsonUpgrade php-gd-debuginfoUpgrade php-fpm-debuginfoUpgrade php-gdUpgrade php-ldapUpgrade php-dbaUpgrade php-xmlrpc-debuginfoUpgrade php-pdo-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pgsqlUpgrade php-enchantUpgrade php-process-debuginfo | Apr 29, 2020 | Feb 22, 2019 |
| Debian | — | Upgrade php7.3 | Feb 25, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-recodeUpgrade php-ldapUpgrade php-mysqlUpgrade php-pdoUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-cliUpgrade php-commonUpgrade php-processUpgrade php-soapUpgrade php-odbcUpgrade phpUpgrade php-pgsqlUpgrade php-gd | Apr 2, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-pdoUpgrade php-ldapUpgrade phpUpgrade php-gdUpgrade php-soapUpgrade php-recodeUpgrade php-mysqlUpgrade php-xmlUpgrade php-odbcUpgrade php-commonUpgrade php-xmlrpcUpgrade php-cliUpgrade php-processUpgrade php-pgsql | Mar 27, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-odbcUpgrade php-ldapUpgrade php-mysqlUpgrade php-pdoUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-soapUpgrade php-gdUpgrade php-processUpgrade php-cliUpgrade php-commonUpgrade php-recodeUpgrade php-xmlUpgrade php | Apr 3, 2019 | Feb 22, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Feb 22, 2019 |
| Oracle_linux | — | Upgrade php-pecl-zipUpgrade php-snmpUpgrade php-mysqlndUpgrade php-opcacheUpgrade libzip-develUpgrade libzip-toolsUpgrade php-cliUpgrade libzipUpgrade php-soapUpgrade php-ldapUpgrade php-dbaUpgrade php-recodeUpgrade php-dbgUpgrade php-enchantUpgrade php-odbcUpgrade php-intlUpgrade php-pgsqlUpgrade apcu-panelUpgrade php-pecl-apcuUpgrade phpUpgrade php-embeddedUpgrade php-bcmathUpgrade php-pdoUpgrade php-gmpUpgrade php-fpmUpgrade php-commonUpgrade php-xmlrpcUpgrade php-pearUpgrade php-gdUpgrade php-develUpgrade php-processUpgrade php-pecl-apcu-develUpgrade php-xmlUpgrade php-jsonUpgrade php-mbstring | Jul 22, 2024 | Dec 29, 2018 |
| Php | — | Upgrade to PHP version 7.3.1Upgrade to PHP version 7.2.14Upgrade to PHP version 5.6.40 | Feb 27, 2019 | Feb 22, 2019 |
| Redhat_linux | — | Upgrade php-snmp-debuginfoUpgrade php-gdUpgrade php-pecl-apcu-debuginfoUpgrade php-pdo-debuginfoUpgrade php-cli-debuginfoUpgrade php-intlUpgrade apcu-panelUpgrade php-dbg-debuginfoUpgrade php-opcache-debuginfoUpgrade php-process-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-xmlrpcUpgrade php-intl-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-ldap-debuginfoUpgrade php-enchantUpgrade php-embedded-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcu-develUpgrade php-debuginfoUpgrade php-dbaUpgrade libzip-toolsUpgrade php-fpm-debuginfoUpgrade php-recodeUpgrade php-processUpgrade php-mbstringUpgrade php-pgsqlUpgrade libzip-tools-debuginfoUpgrade php-soap-debuginfoUpgrade php-soapUpgrade libzip-debugsourceUpgrade php-odbc-debuginfoUpgrade php-snmpUpgrade php-common-debuginfoUpgrade php-fpmUpgrade php-dba-debuginfoUpgrade php-enchant-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pearUpgrade php-pdoUpgrade php-ldapUpgrade phpUpgrade php-gmp-debuginfoUpgrade php-odbcUpgrade php-mysqlndUpgrade php-bcmathUpgrade php-gmpUpgrade php-pecl-zip-debuginfoUpgrade php-xml-debuginfoUpgrade php-jsonUpgrade libzipUpgrade php-recode-debuginfoUpgrade php-pecl-zipUpgrade php-debugsourceUpgrade php-json-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade libzip-debuginfoUpgrade php-develUpgrade php-dbgNo solution existsUpgrade libzip-develUpgrade php-gd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-embeddedUpgrade php-pecl-apcuUpgrade php-opcacheUpgrade php-commonUpgrade php-cliUpgrade php-pecl-apcu-debugsourceUpgrade php-xml | Apr 29, 2020 | Feb 22, 2019 |
| Rocky_linux | — | Upgrade php-fpm-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-dba-debuginfoUpgrade php-cliUpgrade php-debuginfoUpgrade php-soapUpgrade php-embeddedUpgrade php-mysqlndUpgrade php-commonUpgrade php-opcacheUpgrade php-process-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-dbgUpgrade php-ldap-debuginfoUpgrade php-pgsqlUpgrade php-opcache-debuginfoUpgrade libzip-develUpgrade php-recodeUpgrade php-bcmath-debuginfoUpgrade libzip-debugsourceUpgrade php-debugsourceUpgrade php-ldapUpgrade php-pdo-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-snmp-debuginfoUpgrade php-dbaUpgrade php-snmpUpgrade php-gmp-debuginfoUpgrade php-json-debuginfoUpgrade php-odbcUpgrade php-processUpgrade libzip-debuginfoUpgrade phpUpgrade php-gdUpgrade php-soap-debuginfoUpgrade libzip-toolsUpgrade php-cli-debuginfoUpgrade php-embedded-debuginfoUpgrade php-intlUpgrade php-enchant-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-pdoUpgrade php-common-debuginfoUpgrade php-jsonUpgrade php-recode-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-apcuUpgrade php-xmlUpgrade php-gd-debuginfoUpgrade php-gmpUpgrade php-fpmUpgrade php-develUpgrade php-intl-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-zip-debugsourceUpgrade php-bcmathUpgrade php-mbstringUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade libzipUpgrade php-dbg-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-devel | Mar 12, 2024 | Feb 22, 2019 |
| Suse | — | Upgrade php53-pspellUpgrade libtidy-0_99-0-develUpgrade php5-sysvsemUpgrade php7-fpmUpgrade php72-odbcUpgrade php53-mbstringUpgrade php72-zlibUpgrade php5-fastcgiUpgrade php5Upgrade php7-shmopUpgrade php5-opensslUpgrade php53-gdUpgrade php53-gmpUpgrade php7-bcmathUpgrade php7-gdUpgrade php53-ftpUpgrade php5-mysqlUpgrade php7-tokenizerUpgrade php53-bcmathUpgrade php53-gettextUpgrade php53Upgrade php53-pcntlUpgrade apache2-mod_php5Upgrade php7-xmlreaderUpgrade php7-pharUpgrade php53-tidyUpgrade php7-imapUpgrade php7-pearUpgrade php72Upgrade php72-pspellUpgrade php53-xmlreaderUpgrade php72-memcachedUpgrade php53-curlUpgrade php53-xmlwriterUpgrade php72-exifUpgrade php72-fastcgiUpgrade php5-xmlreaderUpgrade tidyUpgrade php53-suhosinUpgrade php5-snmpUpgrade php72-pgsqlUpgrade php72-xmlreaderUpgrade php72-sysvshmUpgrade php72-xmlwriterUpgrade php7-exifUpgrade php72-pear-archive_tarUpgrade php7-tidyUpgrade php53-mysqlUpgrade php7-ftpUpgrade php7-posixUpgrade php5-zipUpgrade php5-ftpUpgrade php72-gettextUpgrade php7-socketsUpgrade php72-ftpUpgrade php72-bcmathUpgrade php5-jsonUpgrade php53-readlineUpgrade php72-tidyUpgrade php53-zipUpgrade libtidy-0_99-0Upgrade php72-socketsUpgrade php5-exifUpgrade php53-socketsUpgrade php7-mysqlUpgrade php53-pdoUpgrade php72-xmlrpcUpgrade php72-posixUpgrade php7Upgrade php53-wddxUpgrade php53-shmopUpgrade php53-imapUpgrade php7-ldapUpgrade php72-sysvsemUpgrade php7-soapUpgrade php72-opcacheUpgrade php7-iconvUpgrade php53-bz2Upgrade php72-snmpUpgrade php53-fastcgiUpgrade php7-embedUpgrade php72-curlUpgrade php5-xmlrpcUpgrade php5-xslUpgrade apache2-mod_php7Upgrade php53-develUpgrade php53-sysvshmUpgrade php5-mcryptUpgrade php53-pgsqlUpgrade php5-wddxUpgrade libmemcachedutil2Upgrade php53-sysvmsgUpgrade php53-iconvUpgrade php5-pharUpgrade php7-sqliteUpgrade php5-opcacheUpgrade php5-gettextUpgrade libmemcached-develUpgrade php7-gmpUpgrade php72-imapUpgrade php72-mysqlUpgrade php72-fileinfoUpgrade php5-imapUpgrade php7-mbstringUpgrade php5-gmpUpgrade php53-calendarUpgrade php5-mbstringUpgrade php7-xslUpgrade php7-pdoUpgrade php53-posixUpgrade php5-pcntlUpgrade php53-odbcUpgrade php5-xmlwriterUpgrade php53-soapUpgrade php7-snmpUpgrade php7-xmlrpcUpgrade php7-gettextUpgrade php72-fpmUpgrade php7-bz2Upgrade php7-sysvmsgUpgrade php72-ctypeUpgrade php7-domUpgrade php7-pear-archive_tarUpgrade php53-sysvsemUpgrade php7-pgsqlUpgrade php72-readlineUpgrade php5-pdoUpgrade php7-wddxUpgrade php5-odbcUpgrade php7-zipUpgrade php7-ctypeUpgrade php53-pearUpgrade php72-gmpUpgrade php53-sqliteUpgrade php53-exifUpgrade php7-sysvsemUpgrade php53-opensslUpgrade php7-fastcgiUpgrade php72-develUpgrade php5-domUpgrade php72-shmopUpgrade php72-domUpgrade php7-odbcUpgrade php5-sysvshmUpgrade php5-socketsUpgrade php7-develUpgrade php72-pdoUpgrade php53-domUpgrade php5-pgsqlUpgrade php72-xslUpgrade php5-bcmathUpgrade php72-tokenizerUpgrade php5-tokenizerUpgrade php72-calendarUpgrade php5-shmopUpgrade php53-fileinfoUpgrade php7-testresultsUpgrade php5-ldapUpgrade php53-ldapUpgrade php5-fileinfoUpgrade php72-gdUpgrade php5-intlUpgrade php72-dbaUpgrade php5-pspellUpgrade php5-suhosinUpgrade libmemcachedUpgrade php7-sodiumUpgrade php72-soapUpgrade php72-pearUpgrade php5-sqliteUpgrade php53-jsonUpgrade php5-develUpgrade libmemcached11Upgrade php53-xslUpgrade php72-jsonUpgrade php5-curlUpgrade apache2-mod_php72Upgrade php72-pcntlUpgrade php5-soapUpgrade php7-zlibUpgrade php7-fileinfoUpgrade php5-ctypeUpgrade php72-enchantUpgrade apache2-mod_php53Upgrade php53-intlUpgrade php7-jsonUpgrade php72-sqliteUpgrade php5-pearUpgrade php72-mbstringUpgrade php7-pspellUpgrade php7-opensslUpgrade php72-sysvmsgUpgrade php7-pcntlUpgrade php7-curlUpgrade php5-dbaUpgrade php53-dbaUpgrade php53-ctypeUpgrade php53-zlibUpgrade php72-opensslUpgrade php72-ldapUpgrade php7-enchantUpgrade php72-iconvUpgrade php53-snmpUpgrade php5-fpmUpgrade php5-posixUpgrade php53-tokenizerUpgrade php5-gdUpgrade php72-bz2Upgrade php5-calendarUpgrade php5-iconvUpgrade php5-zlibUpgrade php7-dbaUpgrade php7-firebirdUpgrade php53-xmlrpcUpgrade php72-zipUpgrade php7-mcryptUpgrade php7-xmlwriterUpgrade php5-enchantUpgrade php5-sysvmsgUpgrade php7-readlineUpgrade php72-intlUpgrade php7-opcacheUpgrade php72-pharUpgrade php53-mcryptUpgrade php7-calendarUpgrade php72-wddxUpgrade php7-intlUpgrade php7-sysvshmUpgrade php5-bz2 | Apr 6, 2019 | Feb 22, 2019 |
| Ubuntu | — | Upgrade php5-fpmUpgrade php5-cgiUpgrade php5-cliUpgrade php7.0-cgiUpgrade php7.0-cliUpgrade php7.0-fpmUpgrade php5-xmlrpcUpgrade libapache2-mod-php5Upgrade php7.0-xmlrpcUpgrade php7.0-mbstringUpgrade libapache2-mod-php7.0 | Mar 15, 2019 | Feb 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub