Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-13225

Опубликовано: 10 июл. 2019
Источник: nvd
CVSS3: 6.5
CVSS2: 4.3
EPSS Низкий

Описание

A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:oniguruma_project:oniguruma:6.9.2:-:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

EPSS

Процентиль: 32%
0.00118
Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 6 лет назад

A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.

CVSS3: 5.3
redhat
почти 6 лет назад

A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.

CVSS3: 6.5
debian
почти 6 лет назад

A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9 ...

suse-cvrf
11 месяцев назад

Security update for oniguruma

rocky
больше 4 лет назад

Moderate: oniguruma security update

EPSS

Процентиль: 32%
0.00118
Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476