Out-of-bounds read in Oniguruma - CVE-2019-19246

Vulnerability identifier: #VU23097

CSH Severity: Low

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-19246

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to heap-based buffer over-read in str_lower_case_match in regexec.c, if used with PPH 7.3. A remote attacker can perform a denial of service attack or gain access to sensitive information.

Oniguruma
Red Hat Software Collections
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Ubuntu
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Server for SAP Applications
openSUSE Leap
Fedora
PowerStore T
Robotic Process Automation for Cloud Pak
IBM Cloud Transformation Advisor
libonig2 (Ubuntu package)
libonig4
libonig4-debuginfo
oniguruma-debugsource
oniguruma-devel
oniguruma
rh-php73-php (Red Hat package)
Dell EMC VxRail Appliance

Install update from vendor's website.

Oniguruma - update to 6.9.4
PowerStore T - update to 3.5.0.1-2083289
IBM Cloud Transformation Advisor - update to 3.10.1
libonig2 (Ubuntu package) - update to 5.9.1-1ubuntu1.1+esm2
libonig4 - update to 6.7.0-150000.3.3.1
libonig4-debuginfo - update to 6.7.0-150000.3.3.1
oniguruma-debugsource - update to 6.7.0-150000.3.3.1
oniguruma-devel - update to 6.7.0-150000.3.3.1
oniguruma - update to 6.9.4-1.fc31
Dell EMC VxRail Appliance - addressed in versions 7.0.401, 8.0.000
rh-php73-php (Red Hat package) - update to 7.3.20-1.el7
Robotic Process Automation for Cloud Pak - update to 21.0.6

• https://bugs.php.net/bug.php?id=78559
• https://github.com/kkos/oniguruma/commit/d3e402928b6eb3327f8f7d59a9edfa622fec557b

• Multiple vulnerabilities in Oniguruma
• Red Hat Software Collections 1 for RHEL 7.7 update for rh-php73-php
• SUSE update for oniguruma
• Multiple vulnerabilities in Dell VxRail
• Multiple vulnerabilities in Dell VxRail Appliance components
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in Dell PowerStore Family
• Ubuntu update for libonig
• Red Hat Enterprise Linux 8 update for the php:7.3 module
• Fedora 31 update for oniguruma
• Multiple vulnerabilities in IBM Cloud Transformation Advisor