CVE-2019-19204

CVE-2019-19204 在 Oniguruma 6.x（6.9.4rc2 之前版本）中发现了一个问题。在 regparse.c 的 fetchintervalquantifier（原名为 fetchrangequantifier）函数中，调用 PFETCH 时未检查 PEND。这会导致基于堆的缓冲区过度读取。 研究人员：ManhND of The Tarantula Team, VinCSS（Vingroup 成员） 什么是 Oniguruma Oniguruma 由 K. Kosako 开发，是一个采用 BSD 许可的正则表达式库，支持多种字符编码。Ruby 编程语言（1.9...

EUVD-2019-8836

Malware in sbrugna...

SUSE CVE-2019-19204

An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read...

DEBIAN-CVE-2019-19204

An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read...

Heap overflow

An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read...

CVE-2019-19204

An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read...