An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in ext/mbstring/oniguruma/regcomp.c, ext/mbstring/oniguruma/regexec.c, ext/mbstring/oniguruma/regparse.c, ext/mbstring/oniguruma/enc/unicode.c, and ext/mbstring/oniguruma/src/utf32_be.c when a multibyte regular expression pattern contains invalid multibyte sequences.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-xmlUpgrade php-opcacheUpgrade apcu-panelUpgrade php-pearUpgrade php-dbgUpgrade phpUpgrade libzip-develUpgrade php-odbcUpgrade php-snmpUpgrade php-fpmUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-ldapUpgrade php-recodeUpgrade php-mbstringUpgrade php-mysqlndUpgrade php-xmlrpcUpgrade libzip-toolsUpgrade php-cliUpgrade php-intlUpgrade php-pgsqlUpgrade php-soapUpgrade php-pdoUpgrade php-embeddedUpgrade php-gmpUpgrade php-bcmathUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade php-processUpgrade libzipUpgrade php-pecl-zipUpgrade php-develUpgrade php-gdUpgrade php-enchantUpgrade php-json | May 4, 2022 | Feb 22, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 22, 2019 |
| Centos_linux | — | Upgrade php-pecl-apcu-debugsourceUpgrade php-xmlrpcUpgrade php-mysqlndUpgrade php-dba-debuginfoUpgrade php-commonUpgrade apcu-panelUpgrade php-enchant-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-intlUpgrade php-mysqlnd-debuginfoUpgrade libzip-debuginfoUpgrade php-odbcUpgrade php-soap-debuginfoUpgrade php-common-debuginfoUpgrade libzip-develUpgrade php-debuginfoUpgrade php-json-debuginfoUpgrade php-ldap-debuginfoUpgrade php-xml-debuginfoUpgrade php-opcacheUpgrade php-cliUpgrade php-dbgUpgrade php-snmp-debuginfoUpgrade php-mbstringUpgrade php-recode-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pgsql-debuginfoUpgrade libzip-toolsUpgrade php-intl-debuginfoUpgrade php-xmlUpgrade php-snmpUpgrade php-bcmath-debuginfoUpgrade php-soapUpgrade php-gd-debuginfoUpgrade php-gmpUpgrade php-pearUpgrade php-jsonUpgrade php-gdUpgrade php-fpm-debuginfoUpgrade php-pdoUpgrade php-odbc-debuginfoUpgrade php-debugsourceUpgrade libzip-debugsourceUpgrade php-bcmathUpgrade php-recodeUpgrade libzip-tools-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-embeddedUpgrade php-pgsqlUpgrade php-develUpgrade php-pdo-debuginfoUpgrade php-gmp-debuginfoUpgrade php-fpmUpgrade php-dbaUpgrade php-pecl-apcu-debuginfoUpgrade php-cli-debuginfoUpgrade phpUpgrade php-processUpgrade libzipUpgrade php-embedded-debuginfoUpgrade php-pecl-apcuUpgrade php-dbg-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-pecl-zip-debugsourceUpgrade php-ldap | Apr 29, 2020 | Feb 22, 2019 |
| Debian | — | Upgrade php7.3 | Feb 25, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-cliUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-ldapUpgrade php-pdoUpgrade php-commonUpgrade php-recodeUpgrade php-mysqlUpgrade php-gdUpgrade php-processUpgrade php-pgsqlUpgrade phpUpgrade php-soapUpgrade php-odbc | Apr 2, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-commonUpgrade php-xmlUpgrade php-pgsqlUpgrade php-mysqlUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-processUpgrade php-cliUpgrade php-recodeUpgrade php-pdoUpgrade php-ldapUpgrade php-soapUpgrade phpUpgrade php-gd | Mar 27, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-gdUpgrade php-soapUpgrade php-pdoUpgrade php-ldapUpgrade php-odbcUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade phpUpgrade php-recodeUpgrade php-processUpgrade php-cliUpgrade php-commonUpgrade php-xml | Apr 3, 2019 | Feb 22, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Feb 22, 2019 |
| Oracle_linux | — | Upgrade php-gmpUpgrade php-pdoUpgrade php-mbstringUpgrade php-jsonUpgrade php-commonUpgrade php-pecl-apcu-develUpgrade php-xmlUpgrade php-processUpgrade php-gdUpgrade php-xmlrpcUpgrade php-develUpgrade php-pearUpgrade php-fpmUpgrade php-pgsqlUpgrade php-dbgUpgrade php-pecl-zipUpgrade php-recodeUpgrade php-odbcUpgrade php-enchantUpgrade php-embeddedUpgrade php-mysqlndUpgrade libzip-toolsUpgrade libzip-develUpgrade apcu-panelUpgrade php-intlUpgrade php-snmpUpgrade php-ldapUpgrade libzipUpgrade php-pecl-apcuUpgrade phpUpgrade php-opcacheUpgrade php-bcmathUpgrade php-dbaUpgrade php-cliUpgrade php-soap | Jul 22, 2024 | Dec 29, 2018 |
| Php | — | Upgrade to PHP version 7.2.14Upgrade to PHP version 5.6.40Upgrade to PHP version 7.3.1 | Feb 27, 2019 | Feb 22, 2019 |
| Redhat_linux | — | Upgrade libzip-debugsourceUpgrade php-intlUpgrade php-processUpgrade php-intl-debuginfoUpgrade php-mbstringUpgrade php-pgsqlUpgrade php-bcmath-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade php-gdUpgrade php-soapUpgrade apcu-panelUpgrade php-soap-debuginfoUpgrade libzip-toolsUpgrade libzip-tools-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-odbc-debuginfoUpgrade php-process-debuginfoUpgrade php-dbg-debuginfoUpgrade php-snmp-debuginfoUpgrade php-fpm-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pdo-debuginfoUpgrade php-cli-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-embedded-debuginfoUpgrade php-enchantUpgrade php-pecl-apcu-debuginfoUpgrade php-debuginfoUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-pecl-zipUpgrade php-pearUpgrade php-dbgUpgrade php-ldapUpgrade php-fpmUpgrade php-debugsourceUpgrade php-gmp-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-enchant-debuginfoUpgrade php-snmpUpgrade php-mbstring-debuginfoUpgrade php-recode-debuginfoUpgrade php-gmpUpgrade php-bcmathUpgrade phpUpgrade php-xmlrpc-debuginfoUpgrade php-mysqlndUpgrade php-commonNo solution existsUpgrade php-odbcUpgrade libzipUpgrade php-xml-debuginfoUpgrade php-jsonUpgrade php-pdoUpgrade php-pecl-zip-debuginfoUpgrade php-json-debuginfoUpgrade libzip-develUpgrade php-gd-debuginfoUpgrade php-develUpgrade php-cliUpgrade php-opcacheUpgrade php-common-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-embeddedUpgrade php-dba-debuginfoUpgrade php-xmlUpgrade php-pecl-apcuUpgrade libzip-debuginfo | Apr 29, 2020 | Feb 22, 2019 |
| Rocky_linux | — | Upgrade php-embeddedUpgrade php-intlUpgrade php-soap-debuginfoUpgrade php-recodeUpgrade php-pecl-zip-debuginfoUpgrade php-processUpgrade php-snmpUpgrade php-snmp-debuginfoUpgrade libzip-toolsUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-debugsourceUpgrade php-pgsqlUpgrade php-pdo-debuginfoUpgrade libzip-develUpgrade php-mysqlndUpgrade php-fpm-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-dba-debuginfoUpgrade php-dbaUpgrade php-opcacheUpgrade php-pgsql-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-commonUpgrade php-embedded-debuginfoUpgrade php-dbgUpgrade php-ldapUpgrade php-cliUpgrade php-process-debuginfoUpgrade libzip-debugsourceUpgrade php-opcache-debuginfoUpgrade php-gdUpgrade php-gmp-debuginfoUpgrade php-soapUpgrade php-json-debuginfoUpgrade libzip-debuginfoUpgrade phpUpgrade php-odbcUpgrade php-debuginfoUpgrade php-ldap-debuginfoUpgrade php-jsonUpgrade php-xmlrpc-debuginfoUpgrade php-intl-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-zipUpgrade php-xmlrpcUpgrade php-mysqlnd-debuginfoUpgrade php-enchantUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcuUpgrade php-common-debuginfoUpgrade php-pecl-apcu-develUpgrade php-recode-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pdoUpgrade php-pecl-apcu-debuginfoUpgrade php-dbg-debuginfoUpgrade php-mbstringUpgrade php-bcmathUpgrade php-xml-debuginfoUpgrade php-xmlUpgrade php-fpmUpgrade php-odbc-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-gmpUpgrade php-develUpgrade libzip | Mar 12, 2024 | Feb 22, 2019 |
| Suse | — | Upgrade php72-pear-archive_tarUpgrade php7-tokenizerUpgrade php7-tidyUpgrade php53-pcntlUpgrade php7-gdUpgrade php53Upgrade php53-bcmathUpgrade libmemcached-develUpgrade php72Upgrade php7-pgsqlUpgrade php72-xmlreaderUpgrade php7-sqliteUpgrade php5-fastcgiUpgrade php53-mbstringUpgrade php72-tidyUpgrade php72-xmlrpcUpgrade php72-gettextUpgrade php53-wddxUpgrade php5-exifUpgrade php53-zipUpgrade php5Upgrade php7-ftpUpgrade php5-pharUpgrade php53-imapUpgrade apache2-mod_php5Upgrade php7-posixUpgrade php5-pdoUpgrade php7-gmpUpgrade php5-xmlwriterUpgrade php7Upgrade php72-pgsqlUpgrade php7-pharUpgrade php53-shmopUpgrade php7-socketsUpgrade php7-mysqlUpgrade php72-fileinfoUpgrade php53-gettextUpgrade php7-bz2Upgrade libtidy-0_99-0-develUpgrade php72-pspellUpgrade php53-tidyUpgrade libtidy-0_99-0Upgrade php72-xmlwriterUpgrade php5-zipUpgrade php72-bcmathUpgrade php5-jsonUpgrade php72-fpmUpgrade php5-ftpUpgrade php53-socketsUpgrade php7-exifUpgrade php53-readlineUpgrade php72-ftpUpgrade php53-mysqlUpgrade php7-xmlreaderUpgrade php53-odbcUpgrade php72-zlibUpgrade php53-calendarUpgrade php5-gettextUpgrade php7-sysvmsgUpgrade php7-imapUpgrade php72-posixUpgrade php72-ctypeUpgrade php7-mbstringUpgrade php7-snmpUpgrade php72-curlUpgrade php53-posixUpgrade php7-xslUpgrade php5-mcryptUpgrade php5-wddxUpgrade php7-gettextUpgrade php53-pdoUpgrade php53-sysvshmUpgrade php72-mysqlUpgrade libmemcachedutil2Upgrade php72-memcachedUpgrade php53-pgsqlUpgrade php53-bz2Upgrade apache2-mod_php7Upgrade php53-fastcgiUpgrade php53-develUpgrade php72-opcacheUpgrade php7-iconvUpgrade php5-xslUpgrade php5-xmlrpcUpgrade php72-sysvsemUpgrade php7-soapUpgrade php72-snmpUpgrade php7-embedUpgrade php5-mysqlUpgrade php53-ftpUpgrade php7-ldapUpgrade php53-iconvUpgrade php53-xmlwriterUpgrade php72-odbcUpgrade php53-sysvsemUpgrade php7-bcmathUpgrade php53-xmlreaderUpgrade php72-fastcgiUpgrade php72-exifUpgrade php7-fpmUpgrade tidyUpgrade php53-pspellUpgrade php53-gdUpgrade php53-gmpUpgrade php53-suhosinUpgrade php5-snmpUpgrade php72-sysvshmUpgrade php7-wddxUpgrade php7-pear-archive_tarUpgrade php5-pcntlUpgrade php7-domUpgrade php5-opensslUpgrade php53-soapUpgrade php53-curlUpgrade php72-imapUpgrade php72-socketsUpgrade php7-shmopUpgrade php7-xmlrpcUpgrade php5-mbstringUpgrade php7-pdoUpgrade php7-pearUpgrade php5-gmpUpgrade php5-opcacheUpgrade php5-sysvsemUpgrade php53-sysvmsgUpgrade php5-xmlreaderUpgrade php72-readlineUpgrade php5-imapUpgrade php7-opensslUpgrade php72-dbaUpgrade php5-bcmathUpgrade php53-intlUpgrade php7-fileinfoUpgrade php72-soapUpgrade php5-suhosinUpgrade php72-pearUpgrade php5-sqliteUpgrade php53-xslUpgrade php5-pspellUpgrade php5-gdUpgrade php72-xslUpgrade php7-develUpgrade php5-socketsUpgrade php72-tokenizerUpgrade php72-domUpgrade php5-fpmUpgrade php7-opcacheUpgrade php7-intlUpgrade php7-firebirdUpgrade php7-dbaUpgrade php53-xmlrpcUpgrade php53-mcryptUpgrade php5-enchantUpgrade php7-mcryptUpgrade php7-calendarUpgrade php72-zipUpgrade php7-xmlwriterUpgrade php72-intlUpgrade php72-wddxUpgrade php72-pharUpgrade php7-sysvshmUpgrade php7-readlineUpgrade php5-sysvmsgUpgrade libmemcached11Upgrade php5-intlUpgrade php5-fileinfoUpgrade php72-develUpgrade php5-bz2Upgrade php72-calendarUpgrade php5-shmopUpgrade php7-ctypeUpgrade php72-pcntlUpgrade php7-testresultsUpgrade php53-fileinfoUpgrade php72-gmpUpgrade php7-zipUpgrade php53-pearUpgrade php7-curlUpgrade php53-ctypeUpgrade php53-dbaUpgrade php7-pcntlUpgrade php5-dbaUpgrade php72-opensslUpgrade php53-zlibUpgrade php53-snmpUpgrade php7-enchantUpgrade php72-sysvmsgUpgrade php72-enchantUpgrade php72-ldapUpgrade php72-sqliteUpgrade php72-mbstringUpgrade php5-develUpgrade php72-shmopUpgrade php5-iconvUpgrade php5-zlibUpgrade php7-sysvsemUpgrade php53-opensslUpgrade php5-odbcUpgrade php53-sqliteUpgrade php5-domUpgrade php5-pgsqlUpgrade php53-domUpgrade php72-pdoUpgrade php53-tokenizerUpgrade php7-jsonUpgrade php5-ctypeUpgrade php5-soapUpgrade php5-pearUpgrade php72-iconvUpgrade php5-tokenizerUpgrade php53-ldapUpgrade php7-odbcUpgrade php7-fastcgiUpgrade php5-ldapUpgrade php5-sysvshmUpgrade php5-calendarUpgrade php53-exifUpgrade php5-curlUpgrade apache2-mod_php72Upgrade libmemcachedUpgrade php72-jsonUpgrade php72-gdUpgrade php7-sodiumUpgrade php53-jsonUpgrade apache2-mod_php53Upgrade php72-bz2Upgrade php7-pspellUpgrade php5-posixUpgrade php7-zlib | Apr 6, 2019 | Feb 22, 2019 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade php7.0-cliUpgrade php7.0-mbstringUpgrade php5-xmlrpcUpgrade php7.0-xmlrpcUpgrade php7.0-fpmUpgrade libapache2-mod-php7.0Upgrade php5-fpmUpgrade php7.0-cgiUpgrade php5-cgiUpgrade php5-cli | Mar 15, 2019 | Feb 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub