CVE-2019-19246

7.5

HIGHCVSS v3

Published

November 25, 2019

CVSS v2

5 MEDIUM

Affected

10 projects

Assigned by

MITRE

Severity scale

010

Description

Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.

oniguruma

NPMoniguruma regular expression library

<= 6.9.3NVD

@now/php

NPM

>= 7.3.0, < 7.3.10NVD

kkos/oniguruma

GitHub

More on this CVE

NVD↗GitHub Advisory↗

regular expression library

<= 6.9.3NVD

php

Crates.ioRust bindings for the PHP runtime

>= 7.3.0, < 7.3.10NVD

php

NPMAllows you to run PHP code in Node.js in various ways.

>= 7.3.0, < 7.3.10NVD

php

Python Package IndexHandle some of the strange standards in PHP projects

>= 7.3.0, < 7.3.10NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 31NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 31NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 31NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 31NVD

Security Advisories

CVE-2019-19246

Description

More on this CVE