oniguruma: integer overflow in search_in_range function in regexec.c leads to out-of-bounds read

An integer overflow vulnerability leading to an out-of-bounds read was found in the way Oniguruma handled regular expression quantifiers. A remote attacker could abuse this flaw by providing a malformed regular expression that, when processed by an application linked to Oniguruma, could crash the...

oniguruma:fuzzer: Heap-buffer-overflow in gbNUMBER_mbc_enc_len

Detailed Report: https://oss-fuzz.com/testcase?key=6577740522586112 Project: oniguruma Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanoniguruma Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x607000001180 Crash State: gbNUMBERmbcenclen matchat...

DEBIAN-CVE-2019-19012

An integer overflow in the searchinrange function in regexec.c in Oniguruma 6.x before 6.9.4rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. This only affects the 32-bit compiled version. Remote attackers can cause a denial-of-service or...

Integer overflow

An integer overflow in the searchinrange function in regexec.c in Oniguruma 6.x before 6.9.4rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. This only affects the 32-bit compiled version. Remote attackers can cause a denial-of-service or...

CVE-2019-19012

An integer overflow in the searchinrange function in regexec.c in Oniguruma 6.x before 6.9.4rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. This only affects the 32-bit compiled version. Remote attackers can cause a denial-of-service or...

CVE-2019-19012

CVE-2019-19012 affects Oniguruma 6.x (before 6.9.4_rc2). The root cause is an integer overflow in regexec.c: search_in_range uses sch_range += reg->dmax, which can overflow on 32-bit builds and lead to an out-of-bounds read. This allows remote attackers to cause denial of service or informatio...