Skip to content
OpenAdvisories
Unscored DLA-2020-1 3 CVEs

libonig - security update

Published Dec 4, 2019 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 8 libonig 5.9.5-3.2+deb8u4

Vulnerabilities 3

  • Unscored —
    CVE-2019-19012 Public exploit EPSS 11%

    An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-b…

  • Unscored —
    CVE-2019-19204 Public exploit

    An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as…

  • Unscored —

    Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_m…