Security Advisory

CVE-2019-19204

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-11-21 20:06:47

Last updated 2024-08-05 02:09:39

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read.

← Browse all CVEs View on cve.org ↗