CVE-2019-19012

highpriority · attend · 53EPSS 0.106 · 96 %ileexploit · PoCDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

2 exploits · PoC

Likely / severe?

10.6% (96th) EPSS

CVSS 7.5 · high

Is it mine?

120 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-26

An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a denial-of-service or information disclosure, or possibly have unspecified other impact, via a crafted regular expression.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedoniguruma-0:6.8.2-2.1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-0:6.8.2-2.1.el8_6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-0:6.8.2-2.1.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-0:6.8.2-2.1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-0:6.8.2-2.1.el8_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-0:6.8.2-2.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_6.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_6.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-devel-0:6.8.2-2.1.el8_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-devel-0:6.8.2-2.1.el8_6.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-devel-0:6.8.2-2.1.el8_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-devel-0:6.8.2-2.1.el8_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-devel-0:6.8.2-2.1.el8_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0409
Fixedoniguruma-0:6.8.2-2.1.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-0:6.8.2-2.1.el8_8.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-0:6.8.2-2.1.el8_8.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-0:6.8.2-2.1.el8_8.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-0:6.8.2-2.1.el8_8.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-0:6.8.2-2.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_8.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_8.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_8.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_8.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_8.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_8.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_8.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_8.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_8.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_8.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_8.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_8.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_8.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_8.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_8.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_8.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-devel-0:6.8.2-2.1.el8_8.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-devel-0:6.8.2-2.1.el8_8.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-devel-0:6.8.2-2.1.el8_8.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-devel-0:6.8.2-2.1.el8_8.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-devel-0:6.8.2-2.1.el8_8.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0572
Fixedoniguruma-0:6.8.2-2.1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-0:6.8.2-2.1.el8_9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-0:6.8.2-2.1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-0:6.8.2-2.1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-0:6.8.2-2.1.el8_9.src as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-0:6.8.2-2.1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_9.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debuginfo-0:6.8.2-2.1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_9.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-debugsource-0:6.8.2-2.1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-devel-0:6.8.2-2.1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-devel-0:6.8.2-2.1.el8_9.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-devel-0:6.8.2-2.1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-devel-0:6.8.2-2.1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889
Fixedoniguruma-devel-0:6.8.2-2.1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:0889

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 10 · impact 6.4

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.3criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · Red Hat Product Security US

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-125USprimaryCWE-190USprimaryCWE-125USCWE-190US

exploits (2)

Public proof-of-concept and weaponised exploit code.

ManhNDd/CVE-2019-19012Integer overflow in OnigurumaPoC · poc_in_github
tarantula-team/CVE-2019-19012An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds readPoC · poc_in_github

affected products (120)

Products and version ranges known to be affected.

IBM QRadar SIEM 7.5all versionscert_bundDEcpe:/a:ibm:qradar_siem:7.5
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
RESF Rocky Linuxall versionscert_bundDEcpe:/o:resf:rocky_linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Dell Dell NetWorker vProxy<19.10≤ vProxy<19.10cert_bundDE
Dell Dell NetWorker vProxy<19.9.0.4≤ vProxy<19.9.0.4cert_bundDE
Dell Networker≤ vProxy<19.10cert_bundDE
Dell Networker≤ vProxy<19.9.0.4cert_bundDE
Red Hat Enterprise Linux≤ Oniguruma <6.9.4_rc2cert_bundDE
Red Hat Red Hat Enterprise Linux Oniguruma <6.9.4_rc2≤ Oniguruma <6.9.4_rc2cert_bundDE
n/a n/a≤ n/aenisa_euvdEU
K. Kosako Oniguruma6.0.0 → 6.9.3fstec_bduRU
АО «ИВК» Альт 8 СПall versionsfstec_bduRU
АО «Концерн ВНИИНС» ОС ОН «Стрелец»≤ 16.01.2023fstec_bduRU
АО «НППКТ» ОСОН ОСнова Оnyx≤ 2.5fstec_bduRU
ООО «РусБИТех-Астра» Astra Linux Common Edition≤ 2.12 «Орёл»fstec_bduRU
ООО «РусБИТех-Астра» Astra Linux Special Edition≤ 1.6 «Смоленск»fstec_bduRU
ООО «РусБИТех-Астра» Astra Linux Special Edition для «Эльбрус»≤ 8.1 «Ленинград»fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 9fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 8fstec_bduRU

showing 20 of 120

advisories (5)

Vendor and ecosystem advisories describing this.

RHSA-2024:0409Red Hat Security Advisory: oniguruma security update2024-01-25csaf · redhat_csafUS
An update for oniguruma is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2024:0572Red Hat Security Advisory: oniguruma security update2024-01-30csaf · redhat_csafUS
An update for oniguruma is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2024:0889Red Hat Security Advisory: oniguruma security update2024-02-20csaf · redhat_csafUS
An update for oniguruma is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
WID-SEC-W-2024-0218Red Hat Enterprise Linux's oniguruma, tcpslice, c-ares: Mehrere SchwachstellenDeutsch2024-01-25csaf · cert_bundDE
Ein entfernter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, beliebigen Code auszuführen oder sensible Informationen offenzulegen.
WID-SEC-W-2024-1086IBM QRadar SIEM: Mehrere SchwachstellenDeutsch2024-05-09csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting (XSS)-Angriff durchzuführen oder einen nicht spezifizierten Angriff auszuführen.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund redhat_csaf NVD CVE.org MITRE

published 2019-11-17modified 2026-06-17

related (16,343)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-11645US	—OT critical	2.44% (84th)	KEV	2026-06-09
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium…
CVE-2025-48595US	—OT critical	1.95% (80th)	KEV	2026-06-01
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution p…
CVE-2026-3055US	critical9.8OT critical	91.5% (100th)	KEV	2026-03-23
Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread
CVE-2026-21385US	—OT critical	1.29% (70th)	KEV	2026-03-02
Memory corruption while using alignments for memory allocation.
CVE-2025-5777US	high7.5OT critical	100.0% (100th)	KEV	2025-06-17
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

+16338 more

references (29)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan