Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2019-13225

Опубликовано: 10 июл. 2019
Источник: debian

Описание

A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libonigfixed6.9.2-1package
libonigno-dsabusterpackage
libonignot-affectedstretchpackage
libonignot-affectedjessiepackage

Примечания

  • https://github.com/kkos/oniguruma/commit/c509265c5f6ae7264f7b8a8aae1cfa5fc59d108c

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 6 лет назад

A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.

CVSS3: 5.3
redhat
около 6 лет назад

A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.

CVSS3: 6.5
nvd
около 6 лет назад

A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.

suse-cvrf
около 1 года назад

Security update for oniguruma

rocky
почти 5 лет назад

Moderate: oniguruma security update