CVE-2017-9224

2017-05-2415:29:00

Alpine Linux Development Team

security.alpinelinux.org

0.004 Low

EPSS

Percentile

74.0%

JSON

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in match_at() during regular expression searching. A logical error involving order of validation and access in match_at() could result in an out-of-bounds read from a stack buffer.

OSVersionArchitecturePackageVersionFilename
Alpine3.4-mainnoarchphp5< 5.6.31-r0UNKNOWN
Alpine3.5-communitynoarchphp7< 7.0.21-r0UNKNOWN
Alpine3.5-mainnoarchphp5< 5.6.31-r0UNKNOWN
Alpine3.6-communitynoarchphp5< 5.6.31-r0UNKNOWN
Alpine3.6-communitynoarchphp7< 7.1.9-r0UNKNOWN
Alpine3.7-communitynoarchphp5< 5.6.31-r0UNKNOWN
Alpine3.7-communitynoarchphp7< 7.1.7-r0UNKNOWN
Alpine3.8-communitynoarchphp5< 5.6.31-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.4-main	noarch	php5	< 5.6.31-r0	UNKNOWN
Alpine	3.5-community	noarch	php7	< 7.0.21-r0	UNKNOWN
Alpine	3.5-main	noarch	php5	< 5.6.31-r0	UNKNOWN
Alpine	3.6-community	noarch	php5	< 5.6.31-r0	UNKNOWN
Alpine	3.6-community	noarch	php7	< 7.1.9-r0	UNKNOWN
Alpine	3.7-community	noarch	php5	< 5.6.31-r0	UNKNOWN
Alpine	3.7-community	noarch	php7	< 7.1.7-r0	UNKNOWN
Alpine	3.8-community	noarch	php5	< 5.6.31-r0	UNKNOWN