An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in ext/mbstring/oniguruma/regcomp.c, ext/mbstring/oniguruma/regexec.c, ext/mbstring/oniguruma/regparse.c, ext/mbstring/oniguruma/enc/unicode.c, and ext/mbstring/oniguruma/src/utf32_be.c when a multibyte regular expression pattern contains invalid multibyte sequences.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-recodeUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-snmpUpgrade php-fpmUpgrade phpUpgrade php-opcacheUpgrade php-pecl-apcuUpgrade apcu-panelUpgrade php-dbgUpgrade php-cliUpgrade php-mysqlndUpgrade php-pearUpgrade libzip-develUpgrade php-odbcUpgrade libzip-toolsUpgrade php-ldapUpgrade php-xmlUpgrade php-commonUpgrade libzipUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-gmpUpgrade php-pgsqlUpgrade php-jsonUpgrade php-soapUpgrade php-intlUpgrade php-dbaUpgrade php-develUpgrade php-pdoUpgrade php-processUpgrade php-enchantUpgrade php-bcmathUpgrade php-gd | May 4, 2022 | Feb 22, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 22, 2019 |
| Centos_linux | — | Upgrade php-fpmUpgrade php-pecl-apcuUpgrade php-recodeUpgrade php-dbaUpgrade php-soapUpgrade libzipUpgrade php-bcmathUpgrade php-dbg-debuginfoUpgrade php-embeddedUpgrade php-xmlrpc-debuginfoUpgrade php-embedded-debuginfoUpgrade php-gd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-debugsourceUpgrade php-odbc-debuginfoUpgrade php-pgsqlUpgrade php-develUpgrade libzip-debugsourceUpgrade php-gdUpgrade php-fpm-debuginfoUpgrade php-pdoUpgrade php-processUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-gmp-debuginfoUpgrade phpUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-process-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-ldapUpgrade libzip-tools-debuginfoUpgrade php-pearUpgrade php-pecl-apcu-debuginfoUpgrade php-gmpUpgrade php-cli-debuginfoUpgrade apcu-panelUpgrade php-mysqlndUpgrade php-mbstring-debuginfoUpgrade libzip-toolsUpgrade php-xmlUpgrade php-intl-debuginfoUpgrade php-opcache-debuginfoUpgrade php-enchant-debuginfoUpgrade php-commonUpgrade php-pecl-apcu-debugsourceUpgrade libzip-debuginfoUpgrade php-snmp-debuginfoUpgrade php-ldap-debuginfoUpgrade php-odbcUpgrade php-opcacheUpgrade php-mysqlnd-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-mbstringUpgrade php-snmpUpgrade php-json-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-debuginfoUpgrade libzip-develUpgrade php-dba-debuginfoUpgrade php-xmlrpcUpgrade php-common-debuginfoUpgrade php-soap-debuginfoUpgrade php-xml-debuginfoUpgrade php-cliUpgrade php-pgsql-debuginfoUpgrade php-dbgUpgrade php-intl | Apr 29, 2020 | Feb 22, 2019 |
| Debian | — | Upgrade php7.3 | Feb 25, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade phpUpgrade php-odbcUpgrade php-soapUpgrade php-gdUpgrade php-pgsqlUpgrade php-processUpgrade php-cliUpgrade php-commonUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php-pdoUpgrade php-ldapUpgrade php-xml | Apr 2, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-commonUpgrade php-mysqlUpgrade php-odbcUpgrade php-cliUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-processUpgrade php-xmlUpgrade php-ldapUpgrade php-gdUpgrade php-soapUpgrade php-pdoUpgrade php-recodeUpgrade php | Mar 27, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-pdoUpgrade php-gdUpgrade php-mysqlUpgrade php-ldapUpgrade php-soapUpgrade php-xmlrpcUpgrade php-odbcUpgrade php-pgsqlUpgrade php-recodeUpgrade php-commonUpgrade php-xmlUpgrade php-cliUpgrade php-processUpgrade php | Apr 3, 2019 | Feb 22, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Feb 22, 2019 |
| Oracle_linux | — | Upgrade php-pecl-apcu-develUpgrade php-processUpgrade php-gmpUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-pearUpgrade php-pdoUpgrade php-jsonUpgrade php-commonUpgrade php-xmlUpgrade php-develUpgrade php-gdUpgrade php-mbstringUpgrade phpUpgrade php-recodeUpgrade php-dbgUpgrade php-ldapUpgrade php-pgsqlUpgrade php-cliUpgrade php-pecl-zipUpgrade php-pecl-apcuUpgrade php-opcacheUpgrade php-intlUpgrade apcu-panelUpgrade libzipUpgrade php-mysqlndUpgrade libzip-develUpgrade libzip-toolsUpgrade php-enchantUpgrade php-soapUpgrade php-bcmathUpgrade php-dbaUpgrade php-embeddedUpgrade php-odbcUpgrade php-snmp | Jul 22, 2024 | Dec 29, 2018 |
| Php | — | Upgrade to PHP version 7.3.1Upgrade to PHP version 5.6.40Upgrade to PHP version 7.2.14 | Feb 27, 2019 | Feb 22, 2019 |
| Redhat_linux | — | Upgrade php-pgsql-debuginfoUpgrade php-processUpgrade php-fpm-debuginfoUpgrade apcu-panelUpgrade php-opcache-debuginfoUpgrade php-dbg-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pdo-debuginfoUpgrade php-odbc-debuginfoUpgrade php-cli-debuginfoUpgrade php-intl-debuginfoUpgrade php-mbstringUpgrade php-debuginfoUpgrade php-process-debuginfoUpgrade php-pgsqlUpgrade php-intlUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-enchantUpgrade libzip-toolsUpgrade libzip-debugsourceUpgrade php-soapUpgrade php-dbaUpgrade php-bcmath-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-ldap-debuginfoUpgrade php-xmlrpcUpgrade php-embedded-debuginfoUpgrade php-recodeUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-develUpgrade php-gdUpgrade php-snmpUpgrade php-enchant-debuginfoUpgrade php-embeddedUpgrade php-cliUpgrade phpUpgrade php-debugsourceUpgrade php-xml-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-dba-debuginfoUpgrade php-xmlUpgrade php-pearUpgrade php-recode-debuginfoUpgrade php-pdoUpgrade php-opcacheUpgrade php-odbcUpgrade libzipUpgrade php-bcmathUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-jsonUpgrade php-gmp-debuginfoUpgrade php-ldapUpgrade php-xmlrpc-debuginfoUpgrade libzip-develUpgrade php-dbgUpgrade php-mysqlndNo solution existsUpgrade php-gd-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-common-debuginfoUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-json-debuginfoUpgrade php-fpmUpgrade php-devel | Apr 29, 2020 | Feb 22, 2019 |
| Rocky_linux | — | Upgrade php-pecl-zip-debugsourceUpgrade php-xmlUpgrade php-odbc-debuginfoUpgrade php-bcmathUpgrade php-mysqlnd-debuginfoUpgrade libzipUpgrade libzip-tools-debuginfoUpgrade php-mbstringUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-xml-debuginfoUpgrade php-xmlrpcUpgrade php-gd-debuginfoUpgrade php-intl-debuginfoUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-recode-debuginfoUpgrade php-develUpgrade php-dbg-debuginfoUpgrade php-pecl-apcuUpgrade php-common-debuginfoUpgrade php-enchant-debuginfoUpgrade php-fpmUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-cliUpgrade php-bcmath-debuginfoUpgrade php-embedded-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-soap-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mysqlndUpgrade php-debuginfoUpgrade php-embeddedUpgrade libzip-develUpgrade php-opcacheUpgrade php-gmp-debuginfoUpgrade php-gdUpgrade phpUpgrade libzip-debuginfoUpgrade php-odbcUpgrade php-pdo-debuginfoUpgrade php-snmpUpgrade php-json-debuginfoUpgrade libzip-toolsUpgrade php-processUpgrade php-ldapUpgrade php-ldap-debuginfoUpgrade php-dba-debuginfoUpgrade php-pgsqlUpgrade php-mbstring-debuginfoUpgrade php-commonUpgrade php-process-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dbgUpgrade php-pecl-apcu-debugsourceUpgrade php-intlUpgrade php-dbaUpgrade php-snmp-debuginfoUpgrade php-recodeUpgrade libzip-debugsourceUpgrade php-soapUpgrade php-debugsource | Mar 12, 2024 | Feb 22, 2019 |
| Suse | — | Upgrade php5-dbaUpgrade php5-odbcUpgrade php53-snmpUpgrade php72-iconvUpgrade php72-soapUpgrade php5-intlUpgrade php72-jsonUpgrade php72-pearUpgrade php5-curlUpgrade php5-pspellUpgrade libmemcached11Upgrade php7-pcntlUpgrade php53-tokenizerUpgrade php7-ctypeUpgrade php5-pearUpgrade php7-mcryptUpgrade php53-domUpgrade php7-enchantUpgrade php72-sysvmsgUpgrade php5-sqliteUpgrade php53-pearUpgrade php5-suhosinUpgrade php7-pspellUpgrade php7-sodiumUpgrade php53-xslUpgrade php53-jsonUpgrade php72-sqliteUpgrade php5-fileinfoUpgrade php7-jsonUpgrade php72-dbaUpgrade php72-gdUpgrade apache2-mod_php53Upgrade php5-soapUpgrade php72-opensslUpgrade php5-calendarUpgrade php5-fpmUpgrade php5-develUpgrade php5-iconvUpgrade php72-ldapUpgrade php53-dbaUpgrade php53-zlibUpgrade libmemcachedUpgrade php53-ctypeUpgrade php5-gdUpgrade php5-ldapUpgrade php72-xslUpgrade php72-pdoUpgrade php7-develUpgrade php5-posixUpgrade php5-bcmathUpgrade php72-domUpgrade php72-bz2Upgrade apache2-mod_php72Upgrade php5-domUpgrade php5-zlibUpgrade php5-tokenizerUpgrade php72-tokenizerUpgrade php5-pgsqlUpgrade php72-develUpgrade php7-odbcUpgrade php7-sysvsemUpgrade php7-fastcgiUpgrade php5-sysvshmUpgrade php53-exifUpgrade php53-sqliteUpgrade php53-ldapUpgrade php7-sysvshmUpgrade php7-intlUpgrade php53-xmlrpcUpgrade php72-wddxUpgrade php5-sysvmsgUpgrade php53-opensslUpgrade php72-calendarUpgrade php7-opcacheUpgrade php5-enchantUpgrade php5-bz2Upgrade php5-shmopUpgrade php72-pcntlUpgrade php53-fileinfoUpgrade php72-shmopUpgrade php72-gmpUpgrade php7-testresultsUpgrade php7-zipUpgrade php7-dbaUpgrade php7-readlineUpgrade php7-xmlwriterUpgrade php53-intlUpgrade php7-opensslUpgrade php7-fileinfoUpgrade php72-enchantUpgrade php53-mcryptUpgrade php7-curlUpgrade php72-mbstringUpgrade php5-ctypeUpgrade php72-pharUpgrade php72-zipUpgrade php72-intlUpgrade php7-calendarUpgrade php7-firebirdUpgrade php7-zlibUpgrade php5-socketsUpgrade php5-opensslUpgrade php53-soapUpgrade php72-ftpUpgrade php72-zlibUpgrade php5-snmpUpgrade php53Upgrade php53-gmpUpgrade php53-gdUpgrade php5-fastcgiUpgrade php7-pgsqlUpgrade php7-wddxUpgrade php5-pcntlUpgrade php72-readlineUpgrade php72-opcacheUpgrade php7-ldapUpgrade php53-develUpgrade php53-socketsUpgrade php5-ftpUpgrade php5-jsonUpgrade php53-readlineUpgrade php53-mysqlUpgrade php5-exifUpgrade php53-wddxUpgrade php72-xmlrpcUpgrade php7-socketsUpgrade php72-fpmUpgrade php72-tidyUpgrade php72-gettextUpgrade libtidy-0_99-0Upgrade php7-posixUpgrade php72-bcmathUpgrade php7-ftpUpgrade php53-zipUpgrade php5-zipUpgrade php53-shmopUpgrade php53-iconvUpgrade php7-sqliteUpgrade php7-mbstringUpgrade php7-snmpUpgrade php7-gmpUpgrade php53-imapUpgrade php7-pharUpgrade php7-gettextUpgrade php72-curlUpgrade php72-ctypeUpgrade php7-xslUpgrade php53-pgsqlUpgrade php53-pdoUpgrade libmemcachedutil2Upgrade php5-wddxUpgrade php5Upgrade php72-odbcUpgrade php7-sysvmsgUpgrade php53-mbstringUpgrade php53-bz2Upgrade php7-pear-archive_tarUpgrade php53-sysvsemUpgrade php72-pspellUpgrade php7Upgrade apache2-mod_php5Upgrade php53-posixUpgrade php5-mcryptUpgrade php72-memcachedUpgrade php72-mysqlUpgrade php7-mysqlUpgrade php5-pharUpgrade php7-xmlreaderUpgrade php53-sysvshmUpgrade php72-socketsUpgrade php72Upgrade php5-mbstringUpgrade php7-xmlrpcUpgrade php5-opcacheUpgrade php5-imapUpgrade php5-gettextUpgrade php5-gmpUpgrade php7-pdoUpgrade php72-imapUpgrade php7-pearUpgrade php7-shmopUpgrade php7-imapUpgrade php53-sysvmsgUpgrade php53-curlUpgrade php53-calendarUpgrade php7-domUpgrade php72-posixUpgrade php72-sysvsemUpgrade php5-xmlrpcUpgrade php5-xslUpgrade php72-snmpUpgrade php7-embedUpgrade php7-soapUpgrade php7-iconvUpgrade apache2-mod_php7Upgrade php5-sysvsemUpgrade php53-fastcgiUpgrade php5-mysqlUpgrade php53-xmlreaderUpgrade tidyUpgrade php72-xmlwriterUpgrade php53-pspellUpgrade php72-pear-archive_tarUpgrade php5-xmlwriterUpgrade libmemcached-develUpgrade php72-fileinfoUpgrade php7-gdUpgrade php7-bz2Upgrade php72-pgsqlUpgrade php7-tokenizerUpgrade php5-pdoUpgrade php72-fastcgiUpgrade php5-xmlreaderUpgrade php53-bcmathUpgrade php7-fpmUpgrade php7-bcmathUpgrade php53-xmlwriterUpgrade php72-sysvshmUpgrade php53-odbcUpgrade php53-gettextUpgrade php53-suhosinUpgrade php53-pcntlUpgrade php72-xmlreaderUpgrade php53-ftpUpgrade php72-exifUpgrade php53-tidyUpgrade php7-tidyUpgrade php7-exifUpgrade libtidy-0_99-0-devel | Apr 6, 2019 | Feb 22, 2019 |
| Ubuntu | — | Upgrade php5-cgiUpgrade php7.0-cgiUpgrade php5-cliUpgrade php5-fpmUpgrade php7.0-mbstringUpgrade libapache2-mod-php7.0Upgrade php7.0-fpmUpgrade php5-xmlrpcUpgrade libapache2-mod-php5Upgrade php7.0-cliUpgrade php7.0-xmlrpc | Mar 15, 2019 | Feb 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub