DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Enterprise Linux's oniguruma, tcpslice, c-ares: Mehrere Schwachstellen
view advisory published 2024-01-25
Ein entfernter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, beliebigen Code auszuführen oder sensible Informationen offenzulegen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-22217US | medium5.9 | — | ||
Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c. | ||||
| CVE-2021-41043US | medium5.5 | — | ||
Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact. | ||||
| CVE-2019-19204US | high7.5 | Exploit | ||
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called with… | ||||
| CVE-2019-19203US | high7.5 | Exploit | ||
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the… | ||||
| CVE-2019-19012US | critical9.8 | Exploit | ||
An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the con… | ||||
| CVE-2019-16163US | high7.5 | — | ||
Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c. | ||||
| CVE-2019-13224US | critical9.8 | — | ||
A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-73519 vom 2026-10-09external
- RedHat Security Advisory vom 2024-01-25external
- RedHat Security Advisory vom 2024-01-25external
- RedHat Security Advisory vom 2024-01-25external
- Red Hat Security Advisory RHSA-2024:0571 vom 2024-01-30external
- Red Hat Security Advisory RHSA-2024:0572 vom 2024-01-30external
- Red Hat Security Advisory RHSA-2024:0578 vom 2024-01-30external
- Red Hat Security Advisory RHSA-2024:0769 vom 2024-02-12external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan