9 matches found
Astra Linux - уязвимость в libonig
Oniguruma, as used in PHP 7.3.x and other products, has a heap-based buffer over-read issue in the strlowercasematch function in regexec.c...
EUVD-2019-8872
Malware in sbrugna...
SUSE CVE-2019-19246
Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in strlowercasematch in regexec.c...
The vulnerability of the `str_lower_case_match` component in the Oniguruma regular expression library, which involves reading data beyond the allowed buffer limits, allows attackers to cause service interruptions.
The vulnerability of the strlowercasematch component in the Oniguruma regular expression library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service failures...
oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c
A vulnerability was found in Oniguruma, where improper bounds checking in strlowercasematch within regexec.c can cause a heap-based buffer overflow, a remote attacker could exploit this flaw to crash the application or, in certain scenarios, execute arbitrary code. This occurs when the applicatio...
Debian DLA-2020-1 : libonig security update
Several vulnerabilities were discovered in the Oniguruma regular expressions library, notably used in PHP mbstring. CVE-2019-19012 An integer overflow in the searchinrange function in regexec.c leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker...
Oniguruma Heap Buffer Overflow Vulnerability
Oniguruma is an open source regular expression library. A buffer error vulnerability exists in strlowercasematch in the regexec.c file in Oniguruma versions 6.9.3 and earlier used in PHP version 7.3.x and other products. The vulnerability stems from a web-based system or product that performs...
DEBIAN-CVE-2019-19246
Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in strlowercasematch in regexec.c...
CVE-2019-19246
CVE-2019-19246: Oniguruma (used in PHP 7.3.x and others) has a heap-based buffer over-read in str_lower_case_match (regexec.c). Public advisories confirm the issue affects Oniguruma up to 6.9.3 and can lead to denial of service or code execution when processing crafted regex inputs. Affected soft...