Lucene search
Veracode Vulnerability DatabaseVERACODE:27606HistoryOct 18, 2020 - 1:51 a.m.
Remote Code Execution (RCE)
2020-10-1801:51:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
rce
oniguruma
buffer overflow
regular expression
compilation
EPSS
0.002
Percentile
64.3%
oniguruma is vulnerable to remote code execution (RCE). The vulnerability exists as a buffer overflow can occur through a regular expression for compilation in concat_opt_exact_str in src/regcomp.c.
References
www.openwall.com/lists/oss-security/2020/09/30/7
github.com/kkos/oniguruma/commit/cbe9f8bd9cfc6c3c87a60fbae58fa1a85db59df0
github.com/kkos/oniguruma/issues/207
lists.debian.org/debian-lts-announce/2021/01/msg00025.html
lists.fedoraproject.org/archives/list/[email protected]/message/2ZCUPCKJNSUHQMXXZBRNDDGQQLBJ2ACT/
lists.fedoraproject.org/archives/list/[email protected]/message/4NHVR7X5ZLXUGW3PBCPQMNFQ3OJCSMQD/
lists.fedoraproject.org/archives/list/[email protected]/message/ZFUJY7BUIFBTZ3IUHVHCID4JYCRDGKPS/
Related
cve
cve
CVE-2020-26159
2020-09-30 21:15:13
nessus
nessus
Photon OS 3.0: Oniguruma PHSA-2020-3.0-0155
2020-10-24 00:00:00
Amazon Linux 2 : oniguruma (ALAS-2020-1560)
2020-11-11 00:00:00
Fedora 32 : oniguruma (2020-952c499e9d)
2020-10-12 00:00:00
openvas
openvas
Fedora: Security Advisory for oniguruma (FEDORA-2020-d53469eceb)
2020-10-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:2993-1)
2024-08-22 00:00:00
Fedora: Security Advisory for oniguruma (FEDORA-2020-bc758654d1)
2020-10-07 00:00:00
prion
prion
Design/Logic Flaw
2020-09-30 21:15:00
alpinelinux
alpinelinux
CVE-2020-26159
2020-09-30 21:15:13
redhatcve
redhatcve
CVE-2020-26159
2020-10-01 05:38:23
cbl_mariner
cbl_mariner
CVE-2020-26159 affecting package oniguruma 6.9.5-2
2020-11-05 04:21:18
mageia
mageia
Updated oniguruma packages fix security vulnerability
2020-12-08 13:40:32
fedora
fedora
[SECURITY] Fedora 32 Update: oniguruma-6.9.5-3.rev1.fc32
2020-10-09 16:14:19
[SECURITY] Fedora 31 Update: oniguruma-6.9.4-2.fc31
2020-10-09 16:28:12
[SECURITY] Fedora 33 Update: oniguruma-6.9.5-3.rev1.fc33
2020-10-06 14:05:37
amazon
amazon
Medium: oniguruma
2020-11-09 21:04:00
cvelist
cvelist
CVE-2020-26159
2020-09-30 12:41:13
nvd
nvd
CVE-2020-26159
2020-09-30 21:15:13
debian
debian
[SECURITY] [DLA 2431-2] libonig regression update
2021-01-30 22:32:04
[SECURITY][DLA 2431-1] libonig security update
2020-11-05 01:29:26
osv
osv
CVE-2020-26159
2020-09-30 21:15:13
Security update for oniguruma
2024-08-21 10:37:46
libonig5-6.9.7.1-1.2 on GA media
2024-06-15 00:00:00
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2020-2.0-0291
2020-10-20 00:00:00
Important Photon OS Security Update - PHSA-2020-0155
2020-10-24 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0155
2020-10-24 00:00:00
suse
suse
Security update for oniguruma (important)
2022-09-21 00:00:00
