Lucene search
Veracode Vulnerability DatabaseVERACODE:28025HistoryDec 02, 2020 - 9:50 a.m.
Buffer Over-read
2020-12-0209:50:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
24
oniguruma
heap-based buffer
function flaw
gb18030.c
EPSS
0.006
Percentile
78.4%
oniguruma is vulnerable to Heap-based buffer over-read. It is possible because of a flaw in the function gb18030_mbc_enc_len in file gb18030.c.
References
access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.6_release_notes/
access.redhat.com/errata/RHSA-2020:5275
access.redhat.com/security/updates/classification/#moderate
github.com/kkos/oniguruma/issues/163
github.com/kkos/oniguruma/releases/tag/v6.9.4_rc2
github.com/ManhNDd/CVE-2019-19203
github.com/tarantula-team/CVE-2019-19203
lists.fedoraproject.org/archives/list/[email protected]/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/
lists.fedoraproject.org/archives/list/[email protected]/message/V3MBNW6Z4DOXSCNWGBLQ7OA3OGUJ44WL/
Related
redhatcve
redhatcve
CVE-2019-19203
2020-02-12 10:14:22
cvelist
cvelist
CVE-2019-19203
2019-11-21 20:06:59
nvd
nvd
CVE-2019-19203
2019-11-21 21:15:11
openvas
openvas
Huawei EulerOS: Security Advisory for php (EulerOS-SA-2021-2606)
2021-10-26 00:00:00
Fedora Update for oniguruma FEDORA-2019-d942abd0d4
2020-01-09 00:00:00
Huawei EulerOS: Security Advisory for oniguruma (EulerOS-SA-2020-1019)
2020-01-23 00:00:00
ubuntucve
ubuntucve
CVE-2019-19203
2019-11-21 00:00:00
osv
osv
CVE-2019-19203
2019-11-21 21:15:11
Moderate: oniguruma security update
2024-02-20 00:00:00
libonig vulnerabilities
2022-10-10 05:11:49
prion
prion
Heap overflow
2019-11-21 21:15:00
githubexploit
githubexploit
Exploit for Out-of-bounds Read in Oniguruma Project Oniguruma
2019-12-24 08:11:11
Exploit for Out-of-bounds Read in Oniguruma Project Oniguruma
2019-11-21 22:43:34
nessus
nessus
EulerOS 2.0 SP3 : php (EulerOS-SA-2021-2606)
2021-10-25 00:00:00
Fedora 30 : oniguruma (2019-73197ff9a0)
2019-12-09 00:00:00
Fedora 31 : oniguruma (2019-d942abd0d4)
2019-12-04 00:00:00
alpinelinux
alpinelinux
CVE-2019-19203
2019-11-21 21:15:00
debiancve
debiancve
CVE-2019-19203
2019-11-21 21:15:11
cve
cve
CVE-2019-19203
2019-11-21 21:15:11
altlinux
altlinux
Security fix for the ALT Linux 8 package oniguruma version 6.9.4-alt1
2019-12-04 00:00:00
almalinux
almalinux
Moderate: oniguruma security update
2024-02-20 00:00:00
Moderate: php:7.3 security, bug fix, and enhancement update
2020-09-08 08:38:31
fedora
fedora
[SECURITY] Fedora 31 Update: oniguruma-6.9.4-1.fc31
2019-12-04 01:15:49
[SECURITY] Fedora 30 Update: oniguruma-6.9.2-4.fc30
2019-12-08 01:03:41
redhat
redhat
(RHSA-2024:0889) Moderate: oniguruma security update
2024-02-20 11:21:18
(RHSA-2024:0409) Moderate: oniguruma security update
2024-01-24 14:40:20
(RHSA-2024:0572) Moderate: oniguruma security update
2024-01-30 12:53:17
oraclelinux
oraclelinux
oniguruma security update
2024-02-20 00:00:00
php:7.3 security, bug fix, and enhancement update
2020-09-09 00:00:00
ubuntu
ubuntu
Oniguruma vulnerabilities
2022-10-10 00:00:00
suse
suse
Security update for oniguruma (important)
2022-09-21 00:00:00
debian
debian
[SECURITY][DLA 2431-1] libonig security update
2020-11-05 01:29:26
mageia
mageia
Updated oniguruma packages fix security vulnerabilities
2020-01-12 02:52:04
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2019-2.0-0196
2019-12-20 00:00:00
Critical Photon OS Security Update - PHSA-2020-0047
2020-01-16 00:00:00
Critical Photon OS Security Update - PHSA-2019-0196
2019-09-24 00:00:00
rocky
rocky
php:7.3 security, bug fix, and enhancement update
2020-09-08 08:38:31
ibm
ibm
Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.
2023-01-06 21:25:02
Security Bulletin: IBM Cloud Pak for Network Automation 2.7.2 addresses multiple security vulnerabilities
2024-04-24 15:52:28
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-04-11 18:19:49