Denial Of Service (DoS)

🗓️ 13 Sep 2019 06:32:40Reported by Veracode Vulnerability DatabaseType

Oniguruma parse_exp function vulnerability in regparse.c allows attacker to generate DoS traffi

Reporter	Title	Published	Views	Family All 117
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in oniguruma 6.9.6-1.el9.6	8 Jul 202507:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	29 Jan 202520:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	26 Mar 202503:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	15 Apr 202502:27	–	ibm
Tenable Nessus	Amazon Linux 2 : oniguruma (ALAS-2020-1380)	9 Jan 202000:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0076: oniguruma (ALINUX3-SA-2024:0076)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : oniguruma (ALSA-2024:0889)	22 Feb 202400:00	–	nessus
Tenable Nessus	CentOS 8 : php:7.3 (CESA-2020:3662)	1 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 9 : oniguruma-6.9.6-1.el9.5	29 Feb 202400:00	–	nessus
Tenable Nessus	Debian DLA-1918-1 : libonig security update	16 Sep 201900:00	–	nessus

Vulners

Node

libonig.so libonig.soRange2.0.0.debug–5.0.0cpp

Source	Link
github	www.github.com/kkos/oniguruma/commit/4097828d7cc87589864fecf452f2cd46c5f37180
github	www.github.com/kkos/oniguruma/issues/147
lists	www.lists.debian.org/debian-lts-announce/2019/09/msg00010.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ZW47MSFZ6WYOAOFXHBDGU4LYACFRKC2Y/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZW47MSFZ6WYOAOFXHBDGU4LYACFRKC2Y/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/NWOWZZNFSAWM3BUTQNAE3PD44A6JU4KE/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NWOWZZNFSAWM3BUTQNAE3PD44A6JU4KE/
github	www.github.com/kkos/oniguruma/compare/v6.9.2...v6.9.3
usn	www.usn.ubuntu.com/4460-1/

07 Nov 2023 23:53Current

7.9High risk

Vulners AI Score7.9

CVSS 25

CVSS 3.17.5

EPSS0.00214