https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 00:13:11 +0000 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-13224 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libonig, Ubuntu:Pro:14.04:LTS: php5, Ubuntu:Pro:16.04:LTS: libonig, Ubuntu:16.04:LTS: groonga, Ubuntu:16.04:LTS: libevhtp, Ubuntu:16.04:LTS: mudlet, Ubuntu:18.04:LTS: groonga, Ubuntu:Pro:18.04:LTS: libonig, Ubuntu:18.04:LTS: mudlet, Ubuntu:20.04:LTS: libonig and 6 more</p> <p>A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libonig, Ubuntu:Pro:14.04:LTS: php5, Ubuntu:Pro:16.04:LTS: libonig, Ubuntu:16.04:LTS: groonga, Ubuntu:16.04:LTS: libevhtp, Ubuntu:16.04:LTS: mudlet, Ubuntu:18.04:LTS: groonga, Ubuntu:Pro:18.04:LTS: libonig, Ubuntu:18.04:LTS: mudlet, Ubuntu:20.04:LTS: libonig and 6 more</p> <p>A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-13224