CVE-2019-19203

CVE-2019-19203 Oniguruma 6.x（6.9.4rc2より前）で問題が発見されました。gb18030.c の関数 gb18030mbcenclen において、UChar ポインタがマッチした文字列の末尾を通過したかどうかをチェックせずにデリファレンスされます。これにより、ヒープベースのバッファオーバーリードが発生します。 研究者: ManhND of The Tarantula Team, VinCSS a member of Vingroup Onigurumaとは K...

The vulnerability of the `gb18030_mbc_enc_len` function in the Oniguruma regular expression library, which relates to reading data beyond the allowed buffer limits, allows attackers to cause service failures.

The vulnerability of the gb18030mbcenclen function in the Oniguruma regular expression library is related to reading data beyond the acceptable buffer limit. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Oniguruma Heap Buffer Over Read Vulnerability

Oniguruma is an open source regular expression library. A heap buffer over-read vulnerability exists in the 'gb18030mbcenclen' function of the gb18030.c file in versions 6.x prior to Oniguruma 6.9.4rc2. The vulnerability stems from a networked system or product performing operations in memory...

UBUNTU-CVE-2019-19203

An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function gb18030mbcenclen in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read...

Heap overflow

An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function gb18030mbcenclen in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read...

CVE-2019-19203: Out-of-bounds Read

An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function gb18030mbcenclen in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read...