rpm package
almalinux/oniguruma-devel
pkg:rpm/almalinux/oniguruma-devel
Vulnerabilities (6)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-19203 | — | < 6.8.2-2.1.el8_9 | 6.8.2-2.1.el8_9 | Nov 21, 2019 | An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read. | ||
| CVE-2019-19204 | — | < 6.8.2-2.1.el8_9 | 6.8.2-2.1.el8_9 | Nov 21, 2019 | An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read. | ||
| CVE-2019-19012 | — | < 6.8.2-2.1.el8_9 | 6.8.2-2.1.el8_9 | Nov 16, 2019 | An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a d | ||
| CVE-2019-16163 | — | < 6.8.2-2.1.el8_9 | 6.8.2-2.1.el8_9 | Sep 9, 2019 | Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c. | ||
| CVE-2019-13224 | — | < 6.8.2-2.1.el8_9 | 6.8.2-2.1.el8_9 | Jul 10, 2019 | A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string | ||
| CVE-2019-13225 | — | < 6.8.2-2.el8 | 6.8.2-2.el8 | Jul 10, 2019 | A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust. |
- CVE-2019-19203Nov 21, 2019affected < 6.8.2-2.1.el8_9fixed 6.8.2-2.1.el8_9
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.
- CVE-2019-19204Nov 21, 2019affected < 6.8.2-2.1.el8_9fixed 6.8.2-2.1.el8_9
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read.
- CVE-2019-19012Nov 16, 2019affected < 6.8.2-2.1.el8_9fixed 6.8.2-2.1.el8_9
An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a d
- CVE-2019-16163Sep 9, 2019affected < 6.8.2-2.1.el8_9fixed 6.8.2-2.1.el8_9
Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
- CVE-2019-13224Jul 10, 2019affected < 6.8.2-2.1.el8_9fixed 6.8.2-2.1.el8_9
A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string
- CVE-2019-13225Jul 10, 2019affected < 6.8.2-2.el8fixed 6.8.2-2.el8
A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.