SUSE CVE-2017-6181

The parsecharclass function in regparse.c in the Onigmo aka Oniguruma-mod regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service deep recursion and application crash via a crafted regular expression...

CVE-2019-16162

Onigmo through 6.2.0 has an out-of-bounds read in parsecharclass because of missing codepoint validation in regenc.c...

CVE-2019-16162

Onigmo through 6.2.0 has an out-of-bounds read in parsecharclass because of missing codepoint validation in regenc.c...

Out-of-bounds

Onigmo through 6.2.0 has an out-of-bounds read in parsecharclass because of missing codepoint validation in regenc.c...

CVE-2019-16162

Onigmo through 6.2.0 has an out-of-bounds read in parsecharclass because of missing codepoint validation in regenc.c...

CVE-2019-16162

CVE-2019-16162 affects Onigmo up to 6.2.0, with an out-of-bounds read in parse_char_class due to missing codepoint validation in regenc.c. The vulnerability is documented across multiple sources (NVD). Exploitation details aren’t provided in the connected documents; CVSS metrics show network acce...

CVE-2018-11419

An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromhex function via a RegExp"\u0" payload, related to reparsecharclass in parser/regexp/re-parser.c...

CVE-2017-9228

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitsetsetrange during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect...

Ruby Denial of Service Vulnerability

Ruby is a cross-platform, object-oriented, dynamically typed programming language developed by Japanese software developer Yukihiro Matsumoto. A security vulnerability exists in the parsecharclass function of the regparse.c file of the Onigmo also known as Oniguruma-mod regular expression library...

CVE-2017-6181

The parsecharclass function in regparse.c in the Onigmo aka Oniguruma-mod regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service deep recursion and application crash via a crafted regular expression...