SUSE CVE-2017-6181

The parsecharclass function in regparse.c in the Onigmo aka Oniguruma-mod regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service deep recursion and application crash via a crafted regular expression...

CVE-2019-16162

Onigmo through 6.2.0 has an out-of-bounds read in parsecharclass because of missing codepoint validation in regenc.c...

CVE-2019-16162

Onigmo through 6.2.0 has an out-of-bounds read in parsecharclass because of missing codepoint validation in regenc.c...

Out-of-bounds

Onigmo through 6.2.0 has an out-of-bounds read in parsecharclass because of missing codepoint validation in regenc.c...

CVE-2019-16162

Onigmo through 6.2.0 has an out-of-bounds read in parsecharclass because of missing codepoint validation in regenc.c...

CVE-2019-16162

CVE-2019-16162 affects Onigmo up to 6.2.0, with an out-of-bounds read in parse_char_class due to missing codepoint validation in regenc.c. The vulnerability is documented across multiple sources (NVD). Exploitation details aren’t provided in the connected documents; CVSS metrics show network acce...

CVE-2018-11419

An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromhex function via a RegExp"\u0" payload, related to reparsecharclass in parser/regexp/re-parser.c...

The vulnerability of the Oniguruma library, related to the use of an uninitialized variable, which allows for memory corruption to occur.

The vulnerability of the Oniguruma library arises from an incorrect change in the state of the parsecharclass function. This allows for the use of an uninitialized variable during writing to the buffer. Exploiting this vulnerability could enable a malicious actor to cause memory corruption by...

CVE-2017-9228

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitsetsetrange during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect...

Ruby Denial of Service Vulnerability

Ruby is a cross-platform, object-oriented, dynamically typed programming language developed by Japanese software developer Yukihiro Matsumoto. A security vulnerability exists in the parsecharclass function of the regparse.c file of the Onigmo also known as Oniguruma-mod regular expression library...

CVE-2017-6181

The parsecharclass function in regparse.c in the Onigmo aka Oniguruma-mod regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service deep recursion and application crash via a crafted regular expression...