rpm package
suse/oniguruma&distro=SUSE Linux Enterprise Micro 5.2
pkg:rpm/suse/oniguruma&distro=SUSE%20Linux%20Enterprise%20Micro%205.2
Vulnerabilities (6)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-19246 | — | < 6.7.0-150000.3.3.1 | 6.7.0-150000.3.3.1 | Nov 25, 2019 | Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c. | ||
| CVE-2019-19203 | — | < 6.7.0-150000.3.3.1 | 6.7.0-150000.3.3.1 | Nov 21, 2019 | An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read. | ||
| CVE-2019-19204 | — | < 6.7.0-150000.3.3.1 | 6.7.0-150000.3.3.1 | Nov 21, 2019 | An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read. | ||
| CVE-2019-16163 | — | < 6.7.0-150000.3.3.1 | 6.7.0-150000.3.3.1 | Sep 9, 2019 | Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c. | ||
| CVE-2019-13224 | — | < 6.7.0-150000.3.3.1 | 6.7.0-150000.3.3.1 | Jul 10, 2019 | A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string | ||
| CVE-2019-13225 | — | < 6.7.0-150000.3.6.1 | 6.7.0-150000.3.6.1 | Jul 10, 2019 | A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust. |
- CVE-2019-19246Nov 25, 2019affected < 6.7.0-150000.3.3.1fixed 6.7.0-150000.3.3.1
Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.
- CVE-2019-19203Nov 21, 2019affected < 6.7.0-150000.3.3.1fixed 6.7.0-150000.3.3.1
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.
- CVE-2019-19204Nov 21, 2019affected < 6.7.0-150000.3.3.1fixed 6.7.0-150000.3.3.1
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read.
- CVE-2019-16163Sep 9, 2019affected < 6.7.0-150000.3.3.1fixed 6.7.0-150000.3.3.1
Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
- CVE-2019-13224Jul 10, 2019affected < 6.7.0-150000.3.3.1fixed 6.7.0-150000.3.3.1
A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string
- CVE-2019-13225Jul 10, 2019affected < 6.7.0-150000.3.6.1fixed 6.7.0-150000.3.6.1
A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.