Lucene search
Veracode Vulnerability DatabaseVERACODE:19314HistoryMay 16, 2019 - 2:59 a.m.
Out-Of-Bounds Read
2019-05-1602:59:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.004 Low
EPSS
Percentile
74.3%
PHP is vulnerable to out-of-bounds reads. The vulnerability exists in match_at() during regular expression searching because of a logical error involving order of validation and access in match_at().
| CPE | Name | Operator | Version |
|---|---|---|---|
| rh-php70-php | eq | 7.0.10__2.el7 | |
| rh-php70-php | eq | 7.0.10__2.el6 | |
| rh-php70-php | eq | 7.0.10__2.el7 | |
| rh-php70-php | eq | 7.0.10__2.el6 |
References
www.securityfocus.com/bid/101244
access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.1_release_notes/chap-rhscl#sect-RHSCL-Changes-php
access.redhat.com/errata/RHSA-2018:1296
access.redhat.com/security/updates/classification/#moderate
github.com/kkos/oniguruma/commit/690313a061f7a4fa614ec5cc8368b4f2284e059b
github.com/kkos/oniguruma/issues/57
Related
alpinelinux
alpinelinux
CVE-2017-9224
2017-05-24 15:29:00
nessus
nessus
Amazon Linux 2 : ruby (ALAS-2023-2201)
2023-08-14 00:00:00
Amazon Linux 2 : oniguruma (ALAS-2023-2217)
2023-08-23 00:00:00
Amazon Linux AMI : ruby20 (ALAS-2023-1824)
2023-09-11 00:00:00
ubuntucve
ubuntucve
CVE-2017-9224
2017-05-24 00:00:00
amazon
amazon
Medium: oniguruma
2023-08-17 11:58:00
Medium: ruby
2023-08-03 18:10:00
Medium: ruby20
2023-08-30 17:56:00
nvd
nvd
CVE-2017-9224
2017-05-24 15:29:00
debiancve
debiancve
CVE-2017-9224
2017-05-24 15:29:00
redhatcve
redhatcve
CVE-2017-9224
2019-11-04 04:16:58
f5
f5
K34551175 : PHP vulnerability CVE-2017-9224
2017-07-21 00:00:00
prion
prion
Stack overflow
2017-05-24 15:29:00
cve
cve
CVE-2017-9224
2017-05-24 15:29:00
cvelist
cvelist
CVE-2017-9224
2017-05-24 15:00:00
osv
osv
CVE-2017-9224
2017-05-24 15:29:00
libonig - security update
2017-05-28 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in php53 affect IBM BladeCenter Advanced Management Module (AMM) (CVE-2017-9227, CVE-2017-9226, CVE-2017-9224)
2023-04-14 14:32:25
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2017:1662-1)
2021-06-09 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2019-2403)
2020-01-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1585-1)
2021-06-09 00:00:00
freebsd
freebsd
oniguruma -- multiple vulnerabilities
2017-07-06 00:00:00
slackware
slackware
[slackware-security] php
2017-07-08 00:39:45
hackerone
hackerone
debian
debian
[SECURITY] [DLA 958-1] libonig security update
2017-05-28 13:46:37
fedora
fedora
[SECURITY] Fedora 24 Update: oniguruma-5.9.6-4.fc24
2017-06-10 10:23:48
[SECURITY] Fedora 26 Update: php-7.1.7-1.fc26
2017-07-18 22:25:50
[SECURITY] Fedora 24 Update: php-5.6.31-1.fc24
2017-07-19 01:49:32
altlinux
altlinux
Security fix for the ALT Linux 8 package oniguruma version 6.4.0-alt1
2017-07-12 00:00:00
mageia
mageia
Updated php and libgd packages fix security vulnerabilities
2017-08-08 01:16:24
ubuntu
ubuntu
PHP vulnerabilities
2017-12-18 00:00:00
PHP vulnerabilities
2017-08-10 00:00:00
photon
photon
redhat
redhat
veracode
veracode
Use After Free
2019-05-16 02:59:58
rosalinux
rosalinux
Advisory ROSA-SA-2021-1966
2021-07-02 18:06:34
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00