Debian: Security Advisory (DLA-2431-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4460-1: Oniguruma vulnerabilities

It was discovered that Oniguruma incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service, obtain sensitive information or other unspecified impact. CVE-2019-16163, CVE-2019-19012, CVE-2019-19204, CVE-2019-19246...

Amazon Linux 2 : oniguruma (ALAS-2020-1380)

The version of oniguruma installed on the remote host is prior to 5.9.6-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1380 advisory. Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c. CVE-2019-16163 Oniguruma...

Fedora 30 : oniguruma (2019-73197ff9a0)

Address CVE-2019-19204 CVE-2019-19203 CVE-2019-19012. Fixes are backported. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Debian DLA-2020-1 : libonig security update

Several vulnerabilities were discovered in the Oniguruma regular expressions library, notably used in PHP mbstring. CVE-2019-19012 An integer overflow in the searchinrange function in regexec.c leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker...

Debian: Security Advisory (DLA-2020-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2020-1] libonig security update

Package : libonig Version : 5.9.5-3.2+deb8u4 CVE ID : CVE-2019-19012 CVE-2019-19204 CVE-2019-19246 Debian Bug : 944959 945313 Several vulnerabilities were discovered in the Oniguruma regular expressions library, notably used in PHP mbstring. CVE-2019-19012 An integer overflow in the searchinrange...

Fedora 31 : oniguruma (2019-d942abd0d4)

6.9.4 final is released. This new version addresses CVE-2019-19246 this one is already fixed in previous rpm, CVE-2019-19204 CVE-2019-19203 CVE-2019-19012. ---- Update to 6.9.4 rc3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...

Security fix for the ALT Linux 8 package oniguruma version 6.9.4-alt1

6.9.4-alt1 built Dec. 4, 2019 Anton Farygin in task 242251 Dec. 2, 2019 Anton Farygin - 6.9.4 - fixes: CVE-2019-19012 Integer overflow related to reg-dmax in searchinrange CVE-2019-19203 heap-buffer-overflow in gb18030mbcenclen CVE-2019-19204 heap-buffer-overflow in fetchintervalquantifier...

Exploit for Integer Overflow or Wraparound in Oniguruma_Project Oniguruma

CVE-2019-19012 An integer overflow in the searchinrange fun...

CVE-2019-19012

CVE-2019-19012 affects Oniguruma 6.x (before 6.9.4_rc2). The root cause is an integer overflow in regexec.c: search_in_range uses sch_range += reg->dmax, which can overflow on 32-bit builds and lead to an out-of-bounds read. This allows remote attackers to cause denial of service or informatio...

CVE-2018-19012

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific dialog it is possible to break out of the kiosk mode and reach the underlying operating system. By breaking out of the kiosk mode, an attacker ...

CVE-2018-19012

The CVE-2018-19012 issue affects Dräger Infinity Delta, Delta XL, Kappa, and Infinity Explorer C700 (all versions). The root cause is improper privilege management in a dialog that allows breaking out of kiosk mode, enabling an attacker to reach the underlying OS and take control of the system. T...

Simple PHP Blog 0.4.0 Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Simple PHP...