CVE-2017-9229: Null Pointer Dereference
Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229)
Other sources
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod i ...
— Debian
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2017-9229.
What is the severity of CVE-2017-9229?
The severity of CVE-2017-9229 is high.
Which software is affected by CVE-2017-9229?
Oniguruma 6.2.0, Ruby through 2.4.1, and PHP through 7.1.5 are affected by CVE-2017-9229.
How can I fix CVE-2017-9229?
To fix CVE-2017-9229, update Oniguruma to version 6.3.0 or later, or update Ruby to a version beyond 2.4.1. For PHP, update to version 7.1.7 or later.
Where can I find more information about CVE-2017-9229?
You can find more information about CVE-2017-9229 on the following references: [Link 1](https://github.com/kkos/oniguruma/issues/59), [Link 2](https://github.com/kkos/oniguruma/commit/b690371bbf97794b4a1d3f295d4fb9a8b05d402d), [Link 3](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1466750).