CVE-2017-9229
- Source
- https://cve.org/CVERecord?id=CVE-2017-9229
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-9229.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2017-9229
- Downstream
- Related
- Published
- 2017-05-24T15:29:00.417Z
- Modified
- 2026-02-14T07:18:45.612510Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A SIGSEGV occurs in leftadjustcharhead() during regular expression compilation. Invalid handling of reg->dmax in forwardsearch_range() could result in an invalid pointer dereference, normally as an immediate denial-of-service condition.
- References
Affected packages
Git / github.com/php/php-src
Database specific
source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-9229.json"
vanir_signatures
[
{
"digest": {
"function_hash": "233037532068098537505988791132617368492",
"length": 13872.0
},
"signature_version": "v1",
"target": {
"file": "ext/pcre/pcrelib/pcre_jit_compile.c",
"function": "compile_bracket_matchingpath"
},
"signature_type": "Function",
"id": "CVE-2017-9229-343f4c1a",
"source": "https://github.com/php/php-src/commit/73915a2bd61f21fd809b4d50af9aba950f43e807",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"41612049881914751775057704412356952022",
"206133687184829194312361432760839012982",
"60469889591596012334583203454317370370",
"317056786488417399517652373716894105276"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "ext/pcre/pcrelib/pcre_jit_compile.c"
},
"signature_type": "Line",
"id": "CVE-2017-9229-cfd9dfdb",
"source": "https://github.com/php/php-src/commit/73915a2bd61f21fd809b4d50af9aba950f43e807",
"deprecated": false
}
]