CVE-2019-19204
21.11.2019, 21:15
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read.Enginsight
| Vendor | Product | Version |
|---|---|---|
| oniguruma_project | oniguruma | 6.0.0 ≤ 𝑥 < 6.9.4 |
| oniguruma_project | oniguruma | 6.9.4:rc1 |
| debian | debian_linux | 8.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libonig |
|
Common Weakness Enumeration
References