621 matches found
CVE-2019-19204
CVE-2019-19204 تم اكتشاف مشكلة في Oniguruma 6.x قبل الإصدار 6.9.4rc2. في الدالة fetchintervalquantifier المعروفة سابقًا باسم fetchrangequantifier في ملف regparse.c، يتم استدعاء PFETCH دون التحقق من PEND. يؤدي هذا إلى قراءة تتجاوز حدود المخزن المؤقت في الكومة heap-based buffer over-read. الباحث:...
CVE-2019-19012
تجاوز سعة عدد صحيح في Oniguruma يؤدي تجاوز سعة عدد صحيح في الدالة searchinrange في الملف regexec.c في Oniguruma 6.x قبل 6.9.4rc2 إلى قراءة خارج النطاق، حيث يكون إزاحة هذه القراءة تحت سيطرة المهاجم. يؤثر هذا فقط على الإصدار المُجمّع 32 بت. يمكن للمهاجمين عن بُعد التسبب في رفض الخدمة أو كشف...
CVE-2019-19012
CVE-2019-19012 Un dépassement d’entier dans la fonction searchinrange du fichier regexec.c dans Oniguruma 6.x avant 6.9.4rc2 conduit à une lecture hors limites, dont le décalage est contrôlé par un attaquant. Cela n’affecte que la version compilée en 32 bits. Des attaquants distants peuvent...
CVE-2019-19204
CVE-2019-19204 تم اكتشاف مشكلة في Oniguruma 6.x قبل الإصدار 6.9.4rc2. في الدالة fetchintervalquantifier المعروفة سابقًا باسم fetchrangequantifier في ملف regparse.c، يتم استدعاء PFETCH دون التحقق من PEND. يؤدي هذا إلى قراءة خارج حدود المخزن المؤقت المخصص على الكومة heap-based buffer over-read...
CVE-2019-19203
CVE-2019-19203 تم اكتشاف مشكلة في Oniguruma 6.x قبل الإصدار 6.9.4rc2. في الدالة gb18030mbcenclen في الملف gb18030.c، يتم إلغاء الإشارة إلى مؤشر UChar دون التحقق من تجاوزه نهاية السلسلة المطابقة. يؤدي هذا إلى قراءة خارج حدود الذاكرة في الكومة heap-based buffer over-read. الباحث: ManhND من فريق The...
Astra Linux – Vulnerability in libonig
A use-after-free in the onignewdeluxe function in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regular expression pattern and a...
Astra Linux – Vulnerability in libonig
A issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function gb18030mbcenclen in the file gb18030.c, a UChar pointer was dereferenced without checking whether it pointed to the end of the matched string. This resulted in a buffer overflow...
Astra Linux – Vulnerability in libonig
A issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH is called without checking PEND. This leads to a buffer overflow issue based on the heap mechanism...
CVE-2019-19203
CVE-2019-19203 تم اكتشاف ثغرة في Oniguruma 6.x قبل الإصدار 6.9.4rc2. في الدالة gb18030mbcenclen الموجودة في الملف gb18030.c، يتم إلغاء مرجعية مؤشر من نوع UChar دون التحقق مما إذا كان قد تجاوز نهاية السلسلة المطابقة. يؤدي ذلك إلى قراءة خارج حدود مخزن مؤقت مخصص على الكومة. الباحث: ManhND من فريق Th...
CentOS Linux 7 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-devel / etc (CENTOS7:CLSA-2025:1758896397)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1758896397 advisory. - An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap...
Rocky Linux 8.8 [CIQ] Security Update: oniguruma / oniguruma-debuginfo / oniguruma-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0782)
The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260782 advisory. This advisory aggregates security fixes for the oniguruma SRPM in CIQ LTS 8.8. It addresses 5 CVEs: CVE-2019-13224, CVE-2019-16163, CVE-2019-19012,...
Rocky Linux 8.6 [CIQ] Security Update: oniguruma / oniguruma-debuginfo / oniguruma-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0123)
The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260123 advisory. This advisory aggregates security fixes for the oniguruma SRPM in CIQ LTS 8.6. It addresses 5 CVEs: CVE-2019-13224, CVE-2019-16163, CVE-2019-19012,...
CentOS Linux 7 [TuxCare] Security Update: ruby / ruby-devel / ruby-doc / ruby-irb / ruby-libs / ruby-tcltk / etc (CENTOS7:CLSA-2025:1757666588)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1757666588 advisory. - An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap...
Rocky Linux 8 [CIQ] Security Update: ruby / ruby-debuginfo / ruby-debugsource / ruby-devel / ruby-doc / etc Multiple Vulnerabilities (crlsa-2025_7539)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257539 advisory. oniguruma: integer overflow in searchinrange function in regexec.c leads to out-of-bounds read CVE-2019-19012 rubygem-bundler: unexpected code execution in...
Rocky Linux 8 [CIQ] Security Update: oniguruma / oniguruma-debuginfo / oniguruma-debugsource / etc (crlsa-2020_4827)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20204827 advisory. oniguruma: NULL pointer dereference in matchat in regexec.c CVE-2019-13225 Tenable has extracted the preceding description block directly from the CIQ security...
CentOS Linux 7 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1757947715)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1757947715 advisory. - An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack...
Rocky Linux 8 [CIQ] Security Update: apcu-panel / libzip / libzip-debuginfo / libzip-debugsource / etc Multiple Vulnerabilities (crlsa-2020_3662)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20203662 advisory. php: Out-of-bounds read due to integer overflow in iconvmimedecodeheaders CVE-2019-11039 php: Buffer over-read in exifreaddata CVE-2019-11040 php:...
CentOS Linux 8 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1776951056)
The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1776951056 advisory. - Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c. CVE-2019-16163 - An issue was...
Astra Linux – Vulnerability in libonig
A NULL pointer dereference in the matchat function in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause a denial of service by providing a crafted regular expression. Oniguruma vulnerabilities often affect Ruby, as well as common optional libraries used in PHP and Rust...