USN-5662-1

Dashboard / Vulnerabilities / USN-5662-1

USN-5662-1

Summary: libonig vulnerabilities

Details: It was discovered that Oniguruma incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service, obtain sensitive information or other unspecified impact. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2019-16163, CVE-2019-19012, CVE-2019-19204, CVE-2019-19246) It was discovered that Oniguruma incorrectly handled memory when using certain UChar pointers. An attacker could possibly use this issue to cause a denial of service or sensitive information disclosure. (CVE-2019-19203)

References: https://ubuntu.com/security/notices/USN-5662-1, https://ubuntu.com/security/CVE-2019-16163, https://ubuntu.com/security/CVE-2019-19012, https://ubuntu.com/security/CVE-2019-19203, https://ubuntu.com/security/CVE-2019-19204, https://ubuntu.com/security/CVE-2019-19246