Known vulnerabilities in Oniguruma

Vendor: K.Kosako
Software: Oniguruma
Software CPE: cpe:2.3:a:kkos:oniguruma:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oniguruma Oniguruma is affected by 9 known vulnerabilities: 4 high, 3 medium, 2 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47647 - Out-of-bounds write
CVE-2020-26159
CWE-787 High
No
No
- 30.09.2020 SB20200930106
SB2020101410
SB2022092145
and 7 more
#VU23097 - Out-of-bounds read
CVE-2019-19246
CWE-125 Low
No
No
6.9.4 29.11.2019 SB2019111806
SB2020120202
SB2022092145
and 8 more
#VU22933 - Buffer over-read
CVE-2019-19204
CWE-126 Medium
No
No
6.9.4 rc2 22.11.2019 SB2019111806
SB2020120202
SB2022092145
and 23 more
#VU22932 - Buffer over-read
CVE-2019-19203
CWE-126 Medium
No
No
6.9.4 rc2 22.11.2019 SB2019111806
SB2020120202
SB2022092145
and 22 more
#VU22814 - Integer overflow
CVE-2019-19012
CWE-190 High
No
No
6.9.4 rc2 18.11.2019 SB2019111806
SB2023021411
SB2024012468
and 19 more
#VU30789 - Resource exhaustion
CVE-2019-16163
CWE-400 Medium
No
No
6.9.3 09.09.2019 SB2019090921
SB2022092145
SB2022110232
and 24 more
#VU20906 - NULL Pointer Dereference
CVE-2019-13225
CWE-476 Low
No
No
6.9.3 06.09.2019 SB2019090602
SB2019100314
SB2019110720
and 6 more
#VU20904 - Use After Free
CVE-2019-13224
CWE-416 High
No
No
6.9.3 06.09.2019 SB2019090602
SB2019092002
SB2019100314
and 26 more
#VU38946 - Out-of-bounds write
CVE-2017-9225
CWE-787 High
No
No
- 24.05.2017 SB2017052427
SB2017053020
SB2017053021
and 2 more