Debian/libonig: critical 9.8
An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker.
Action: Upgrade libonig to 6.9.4-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.9.4-1 | - |
Fixed versions
| 6.9.4-1 |
Sources
published · modified · JSON