An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in ext/mbstring/oniguruma/regcomp.c, ext/mbstring/oniguruma/regexec.c, ext/mbstring/oniguruma/regparse.c, ext/mbstring/oniguruma/enc/unicode.c, and ext/mbstring/oniguruma/src/utf32_be.c when a multibyte regular expression pattern contains invalid multibyte sequences.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pecl-apcuUpgrade php-snmpUpgrade php-opcacheUpgrade apcu-panelUpgrade php-cliUpgrade php-commonUpgrade php-xmlrpcUpgrade php-ldapUpgrade php-mbstringUpgrade php-recodeUpgrade php-mysqlndUpgrade php-pearUpgrade libzip-develUpgrade php-fpmUpgrade phpUpgrade php-xmlUpgrade libzip-toolsUpgrade php-dbgUpgrade php-odbcUpgrade php-pdoUpgrade libzipUpgrade php-bcmathUpgrade php-enchantUpgrade php-jsonUpgrade php-pgsqlUpgrade php-develUpgrade php-soapUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-embeddedUpgrade php-dbaUpgrade php-processUpgrade php-intl | May 4, 2022 | Feb 22, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 22, 2019 |
| Centos_linux | — | Upgrade php-odbc-debuginfoUpgrade php-embeddedUpgrade php-gmp-debuginfoUpgrade php-pgsqlUpgrade php-processUpgrade php-soapUpgrade php-dbaUpgrade php-pdo-debuginfoUpgrade php-pearUpgrade php-pecl-zipUpgrade php-fpmUpgrade php-dbg-debuginfoUpgrade php-embedded-debuginfoUpgrade libzipUpgrade php-pdoUpgrade php-develUpgrade php-xmlrpc-debuginfoUpgrade php-bcmathUpgrade php-pecl-zip-debugsourceUpgrade phpUpgrade libzip-tools-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-develUpgrade php-process-debuginfoUpgrade php-debugsourceUpgrade php-pecl-apcuUpgrade libzip-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-ldapUpgrade php-gdUpgrade php-jsonUpgrade php-gmpUpgrade php-gd-debuginfoUpgrade php-recodeUpgrade php-fpm-debuginfoUpgrade php-enchantUpgrade php-mbstring-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-commonUpgrade php-mysqlndUpgrade php-ldap-debuginfoUpgrade libzip-debuginfoUpgrade php-debuginfoUpgrade libzip-toolsUpgrade php-opcache-debuginfoUpgrade php-xmlUpgrade php-intl-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-snmpUpgrade php-cliUpgrade php-mysqlnd-debuginfoUpgrade php-xml-debuginfoUpgrade php-mbstringUpgrade php-json-debuginfoUpgrade php-snmp-debuginfoUpgrade php-recode-debuginfoUpgrade php-common-debuginfoUpgrade php-soap-debuginfoUpgrade php-opcacheUpgrade libzip-develUpgrade php-pecl-zip-debuginfoUpgrade php-intlUpgrade php-dbgUpgrade php-odbcUpgrade apcu-panelUpgrade php-pecl-apcu-debugsourceUpgrade php-enchant-debuginfoUpgrade php-xmlrpcUpgrade php-dba-debuginfo | Apr 29, 2020 | Feb 22, 2019 |
| Debian | — | Upgrade php7.3 | Feb 25, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-odbcUpgrade php-pgsqlUpgrade php-soapUpgrade phpUpgrade php-gdUpgrade php-processUpgrade php-commonUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-cliUpgrade php-recodeUpgrade php-xmlUpgrade php-mysqlUpgrade php-ldap | Apr 2, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-pgsqlUpgrade php-xmlUpgrade php-mysqlUpgrade php-commonUpgrade php-odbcUpgrade php-cliUpgrade php-processUpgrade php-xmlrpcUpgrade php-gdUpgrade php-recodeUpgrade php-pdoUpgrade phpUpgrade php-ldapUpgrade php-soap | Mar 27, 2019 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade phpUpgrade php-cliUpgrade php-xmlUpgrade php-processUpgrade php-commonUpgrade php-recodeUpgrade php-soapUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-gdUpgrade php-pdoUpgrade php-odbcUpgrade php-mysqlUpgrade php-ldap | Apr 3, 2019 | Feb 22, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Feb 22, 2019 |
| Oracle_linux | — | Upgrade php-mysqlndUpgrade php-dbgUpgrade libzip-develUpgrade libzip-toolsUpgrade apcu-panelUpgrade php-opcacheUpgrade php-bcmathUpgrade php-enchantUpgrade php-odbcUpgrade php-pgsqlUpgrade php-embeddedUpgrade php-cliUpgrade php-pecl-zipUpgrade php-intlUpgrade php-ldapUpgrade php-soapUpgrade php-dbaUpgrade php-recodeUpgrade php-snmpUpgrade libzipUpgrade php-pecl-apcuUpgrade phpUpgrade php-pdoUpgrade php-fpmUpgrade php-processUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-develUpgrade php-jsonUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-pearUpgrade php-gdUpgrade php-commonUpgrade php-xml | Jul 22, 2024 | Dec 29, 2018 |
| Php | — | Upgrade to PHP version 7.3.1Upgrade to PHP version 7.2.14Upgrade to PHP version 5.6.40 | Feb 27, 2019 | Feb 22, 2019 |
| Redhat_linux | — | Upgrade php-jsonUpgrade php-pecl-zip-debuginfoUpgrade phpUpgrade php-snmpUpgrade php-pecl-apcu-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-pdoUpgrade php-recode-debuginfoUpgrade php-odbcUpgrade php-pearUpgrade libzip-develUpgrade libzip-debuginfoUpgrade php-dba-debuginfoUpgrade php-embeddedUpgrade php-gmp-debuginfoNo solution existsUpgrade php-json-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-zipUpgrade php-fpmUpgrade php-commonUpgrade php-debugsourceUpgrade php-dbgUpgrade php-pecl-apcuUpgrade php-mysqlndUpgrade php-pecl-zip-debugsourceUpgrade php-develUpgrade php-common-debuginfoUpgrade libzipUpgrade php-xml-debuginfoUpgrade php-gd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-gmpUpgrade php-opcacheUpgrade php-ldapUpgrade php-cliUpgrade php-xmlUpgrade php-bcmathUpgrade php-soap-debuginfoUpgrade php-ldap-debuginfoUpgrade php-enchantUpgrade php-bcmath-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-develUpgrade php-processUpgrade php-pgsqlUpgrade php-pgsql-debuginfoUpgrade php-dbaUpgrade php-intl-debuginfoUpgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-cli-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pdo-debuginfoUpgrade apcu-panelUpgrade php-mysqlnd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-debuginfoUpgrade php-soapUpgrade php-odbc-debuginfoUpgrade php-intlUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-fpm-debuginfoUpgrade libzip-debugsourceUpgrade php-embedded-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-gd | Apr 29, 2020 | Feb 22, 2019 |
| Rocky_linux | — | Upgrade php-jsonUpgrade php-pecl-apcuUpgrade php-dbg-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-gd-debuginfoUpgrade php-xmlrpcUpgrade php-intl-debuginfoUpgrade php-odbc-debuginfoUpgrade php-mbstringUpgrade php-xmlUpgrade php-bcmathUpgrade php-enchantUpgrade php-mysqlnd-debuginfoUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-common-debuginfoUpgrade php-pecl-apcu-develUpgrade php-xmlrpc-debuginfoUpgrade libzipUpgrade php-fpmUpgrade php-enchant-debuginfoUpgrade php-develUpgrade php-recode-debuginfoUpgrade php-pdoUpgrade libzip-tools-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-xml-debuginfoUpgrade php-snmp-debuginfoUpgrade php-ldap-debuginfoUpgrade php-dba-debuginfoUpgrade php-pgsqlUpgrade php-mysqlndUpgrade php-embeddedUpgrade libzip-develUpgrade php-fpm-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-debuginfoUpgrade php-dbgUpgrade phpUpgrade php-recodeUpgrade libzip-debugsourceUpgrade php-soapUpgrade php-pecl-zip-debuginfoUpgrade php-processUpgrade php-soap-debuginfoUpgrade php-snmpUpgrade php-pdo-debuginfoUpgrade php-ldapUpgrade php-embedded-debuginfoUpgrade php-debugsourceUpgrade php-cli-debuginfoUpgrade libzip-toolsUpgrade php-bcmath-debuginfoUpgrade php-opcacheUpgrade php-opcache-debuginfoUpgrade php-cliUpgrade php-intlUpgrade php-dbaUpgrade php-pecl-apcu-debugsourceUpgrade php-gmp-debuginfoUpgrade libzip-debuginfoUpgrade php-odbcUpgrade php-json-debuginfoUpgrade php-process-debuginfoUpgrade php-gdUpgrade php-mbstring-debuginfoUpgrade php-common | Mar 12, 2024 | Feb 22, 2019 |
| Suse | — | Upgrade libtidy-0_99-0Upgrade php53-wddxUpgrade php72-bcmathUpgrade php7-xslUpgrade php5-jsonUpgrade php7-ftpUpgrade php7-socketsUpgrade php5-sysvsemUpgrade php72-fpmUpgrade php72-xmlrpcUpgrade php7-posixUpgrade tidyUpgrade php53-gettextUpgrade php53-develUpgrade php7-sysvmsgUpgrade php72-readlineUpgrade php53-curlUpgrade php72-imapUpgrade php5-gmpUpgrade php72-socketsUpgrade php5-opcacheUpgrade php72-mysqlUpgrade php5-fastcgiUpgrade php72-opcacheUpgrade php7-xmlrpcUpgrade php72-posixUpgrade php53-gdUpgrade php53-gmpUpgrade php5-snmpUpgrade php53-suhosinUpgrade libtidy-0_99-0-develUpgrade php53-pspellUpgrade php7-bcmathUpgrade php7-gettextUpgrade php7-snmpUpgrade php72-exifUpgrade php72-memcachedUpgrade php72-pgsqlUpgrade php5-mysqlUpgrade php72-ctypeUpgrade php72-sysvshmUpgrade php72Upgrade php7-fpmUpgrade php7-shmopUpgrade php53-sysvshmUpgrade php53-calendarUpgrade php53-pdoUpgrade php5-mbstringUpgrade php5-imapUpgrade php5-gettextUpgrade php7-pdoUpgrade php7-imapUpgrade php53-sysvmsgUpgrade php5-wddxUpgrade php7-wddxUpgrade php7-domUpgrade php53-sysvsemUpgrade php72-snmpUpgrade php5-opensslUpgrade php7-pearUpgrade php72-ftpUpgrade php53-posixUpgrade libmemcachedutil2Upgrade php5-zipUpgrade php7-pgsqlUpgrade php7-pear-archive_tarUpgrade php5-exifUpgrade php53-soapUpgrade php53-mbstringUpgrade php7-soapUpgrade php5-mcryptUpgrade php7-ldapUpgrade php72-sysvsemUpgrade apache2-mod_php7Upgrade php7-iconvUpgrade php53-bz2Upgrade php5-xmlrpcUpgrade php5-xslUpgrade php53-fastcgiUpgrade php53-ftpUpgrade libmemcached-develUpgrade php5-xmlwriterUpgrade php72-pear-archive_tarUpgrade php7-gdUpgrade php7-embedUpgrade php5-pdoUpgrade php53Upgrade php53-pcntlUpgrade php53-tidyUpgrade php53-xmlwriterUpgrade php53-bcmathUpgrade php7-tidyUpgrade php7-tokenizerUpgrade php72-xmlreaderUpgrade php72-xmlwriterUpgrade php53-odbcUpgrade php72-fileinfoUpgrade php5-pcntlUpgrade php7-bz2Upgrade php72-tidyUpgrade php5-xmlreaderUpgrade php72-gettextUpgrade php5-ftpUpgrade php53-socketsUpgrade php7-mbstringUpgrade php53-readlineUpgrade php72-curlUpgrade php72-pspellUpgrade php72-zlibUpgrade php7-pharUpgrade php53-imapUpgrade php7-gmpUpgrade php7-xmlreaderUpgrade php72-odbcUpgrade php7Upgrade php53-iconvUpgrade php5-pharUpgrade php7-sqliteUpgrade php5Upgrade apache2-mod_php5Upgrade php53-shmopUpgrade php53-xmlreaderUpgrade php7-exifUpgrade php72-fastcgiUpgrade php53-pgsqlUpgrade php53-mysqlUpgrade php7-mysqlUpgrade php53-zipUpgrade php5-intlUpgrade php7-sysvshmUpgrade php5-gdUpgrade php7-curlUpgrade php5-tokenizerUpgrade php53-domUpgrade php5-sqliteUpgrade php72-xslUpgrade php72-soapUpgrade apache2-mod_php72Upgrade php72-gdUpgrade php53-ldapUpgrade php7-fastcgiUpgrade php53-snmpUpgrade php5-fpmUpgrade php7-dbaUpgrade php7-calendarUpgrade php72-pharUpgrade php72-intlUpgrade php72-zipUpgrade php5-enchantUpgrade php7-mcryptUpgrade php53-mcryptUpgrade php53-fileinfoUpgrade php7-jsonUpgrade php7-opensslUpgrade php7-fileinfoUpgrade apache2-mod_php53Upgrade php72-sqliteUpgrade php5-soapUpgrade php7-pspellUpgrade php53-intlUpgrade php5-pearUpgrade php72-enchantUpgrade php72-mbstringUpgrade php7-zlibUpgrade php5-ctypeUpgrade php72-calendarUpgrade php72-bz2Upgrade php72-develUpgrade php5-posixUpgrade php7-firebirdUpgrade php53-ctypeUpgrade php72-iconvUpgrade php5-odbcUpgrade php72-opensslUpgrade php5-dbaUpgrade php53-tokenizerUpgrade php72-sysvmsgUpgrade php53-dbaUpgrade php53-zlibUpgrade php7-pcntlUpgrade php7-enchantUpgrade php72-wddxUpgrade php7-intlUpgrade php5-sysvmsgUpgrade php7-zipUpgrade php72-pearUpgrade libmemcached11Upgrade php5-suhosinUpgrade php72-jsonUpgrade php7-sodiumUpgrade php53-jsonUpgrade php5-develUpgrade php5-curlUpgrade php5-fileinfoUpgrade libmemcachedUpgrade php72-dbaUpgrade php53-xslUpgrade php5-pgsqlUpgrade php5-pspellUpgrade php72-tokenizerUpgrade php72-domUpgrade php7-develUpgrade php5-socketsUpgrade php5-domUpgrade php72-gmpUpgrade php5-bcmathUpgrade php72-pdoUpgrade php5-bz2Upgrade php72-pcntlUpgrade php5-ldapUpgrade php72-shmopUpgrade php53-opensslUpgrade php5-sysvshmUpgrade php53-sqliteUpgrade php7-sysvsemUpgrade php5-zlibUpgrade php5-calendarUpgrade php7-odbcUpgrade php5-iconvUpgrade php7-readlineUpgrade php7-opcacheUpgrade php7-ctypeUpgrade php72-ldapUpgrade php7-testresultsUpgrade php53-pearUpgrade php5-shmopUpgrade php53-xmlrpcUpgrade php53-exifUpgrade php7-xmlwriter | Apr 6, 2019 | Feb 22, 2019 |
| Ubuntu | — | Upgrade php5-cliUpgrade php5-cgiUpgrade php7.0-cgiUpgrade php5-fpmUpgrade libapache2-mod-php5Upgrade php7.0-mbstringUpgrade php7.0-cliUpgrade php7.0-fpmUpgrade php7.0-xmlrpcUpgrade libapache2-mod-php7.0Upgrade php5-xmlrpc | Mar 15, 2019 | Feb 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub