« List of all CVEs

CVE-2019-13225

Published: 7/10/2019 Last updated: 8/4/2024 Reserved: 7/3/2019

A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

conf-oniguruma

Products affected (1)

Product Vendor Version
n/a n/a 12.2(25)EY4

References (8)