ID CVE-2017-9228
Summary An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption.
References
Vulnerable Configurations
  • cpe:2.3:a:oniguruma_project:oniguruma:6.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:oniguruma_project:oniguruma:6.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:*:*:*:*:*:oniguruma-mod:*:*
    cpe:2.3:a:php:php:*:*:*:*:*:oniguruma-mod:*:*
  • cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:oniguruma-mod:*:*
    cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:oniguruma-mod:*:*
CVSS
Base: 7.5 (as of 04-05-2018 - 01:29)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
redhat via4
advisories
rhsa
id RHSA-2018:1296
refmap via4
confirm
Last major update 04-05-2018 - 01:29
Published 24-05-2017 - 15:29
Back to Top