cve/2019/CVE-2019-13225.md

CVE-2019-13225

Description

A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/balabit-deps/balabit-os-8-libonig
• https://github.com/balabit-deps/balabit-os-9-libonig
• https://github.com/deepin-community/libonig
• https://github.com/kkos/oniguruma
• https://github.com/onivim/esy-oniguruma
• https://github.com/winlibs/oniguruma