The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0409 advisory.

    Oniguruma is a regular expressions library that supports a variety of character encodings.

    Security Fix(es):

    * oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)

    * oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)

    * oniguruma: integer overflow in search_in_range function in regexec.c leads to out-of-bounds read     (CVE-2019-19012)

    * oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c     (CVE-2019-19203)

    * oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c     (CVE-2019-19204)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7538:01 advisory.

    * oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)
      * oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)
      * oniguruma: integer overflow in search_in_range function in regexec.c leads to out-of-bounds read     (CVE-2019-19012)
      * oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c     (CVE-2019-19203)
      * oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c     (CVE-2019-19204)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0782 advisory.

    This advisory aggregates security fixes for the oniguruma SRPM in CIQ LTS 8.8. It addresses 5 CVEs:
    CVE-2019-13224, CVE-2019-16163, CVE-2019-19012, CVE-2019-19203, CVE-2019-19204.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0123 advisory.

    This advisory aggregates security fixes for the oniguruma SRPM in CIQ LTS 8.6. It addresses 5 CVEs:
    CVE-2019-13224, CVE-2019-16163, CVE-2019-19012, CVE-2019-19203, CVE-2019-19204.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several vulnerabilities were discovered in the Oniguruma regular expressions library, notably used in PHP mbstring.

CVE-2019-19012

An integer overflow in the search_in_range function in regexec.c leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a denial of service or information disclosure, or possibly have unspecified other impact, via a crafted regular expression.

CVE-2019-19204

In the function fetch_range_quantifier in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read and lead to denial of service via a crafted regular expression.

CVE-2019-19246

Heap-based buffer over-read in str_lower_case_match in regexec.c can lead to denial of service via a crafted regular expression.

For Debian 8 'Jessie', these problems have been fixed in version 5.9.5-3.2+deb8u4.

We recommend that you upgrade your libonig packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of oniguruma installed on the remote host is prior to 5.9.6-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1380 advisory.

    Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
    (CVE-2019-16163)

    Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in     str_lower_case_match in regexec.c.(CVE-2019-19246)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3662 advisory.

  - php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)

  - php: Buffer over-read in exif_read_data() (CVE-2019-11040)

  - php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)

  - php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)

  - php: DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at     that byte (CVE-2019-11045)

  - php: Information disclosure in exif_read_data() (CVE-2019-11047)

  - php: Integer wraparounds when receiving multipart forms (CVE-2019-11048)

  - php: Out of bounds read when parsing EXIF information (CVE-2019-11050)

  - oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)

  - oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)

  - oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)

  - oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)

  - oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c     (CVE-2019-19204)

  - oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246)

  - pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode (CVE-2019-20454)

  - php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059)

  - php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060)

  - php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062)

  - php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)

  - php: Information disclosure in exif_read_data() function (CVE-2020-7064)

  - php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution     (CVE-2020-7065)

  - php: Information disclosure in function get_headers (CVE-2020-7066)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier     (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This     leads to a heap-based buffer over-read. (CVE-2019-19204)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-958:01 advisory.

    * php: DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at     that byte (CVE-2019-11045)
      * php: Information disclosure in exif_read_data() (CVE-2019-11047)
      * php: Integer wraparounds when receiving multipart forms (CVE-2019-11048)
      * oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c     (CVE-2019-19203)
      * oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c     (CVE-2019-19204)
      * php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059)
      * php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060)
      * php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062)
      * php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)
      * php: Information disclosure in exif_read_data() function (CVE-2020-7064)
      * php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution     (CVE-2020-7065)
      * php: Out of bounds read when parsing EXIF information (CVE-2019-11050)
      * oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246)
      * php: Information disclosure in function get_headers (CVE-2020-7066)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2020_3662 advisory.

    * php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)

    * php: Buffer over-read in exif_read_data() (CVE-2019-11040)

    * php: DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at     that byte (CVE-2019-11045)

    * php: Information disclosure in exif_read_data() (CVE-2019-11047)

    * php: Integer wraparounds when receiving multipart forms (CVE-2019-11048)

    * oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)

    * oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)

    * oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)

    * oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c     (CVE-2019-19203)

    * oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c     (CVE-2019-19204)

    * pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode (CVE-2019-20454)

    * php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059)

    * php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060)

    * php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062)

    * php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)

    * php: Information disclosure in exif_read_data() function (CVE-2020-7064)

    * php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution     (CVE-2020-7065)

    * php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)

    * php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)

    * php: Out of bounds read when parsing EXIF information (CVE-2019-11050)

    * oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246)

    * php: Information disclosure in function get_headers (CVE-2020-7066)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
189542	RHEL 8 : oniguruma (RHSA-2024:0409)	Nessus	Red Hat Local Security Checks	2024/1/25	2024/11/7	critical
292671	MiracleLinux 8 : oniguruma-6.8.2-2.1.el8_9 (AXSA:2024-7538:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical
357296	Rocky Linux 8.8 [CIQ] Security Update: oniguruma / oniguruma-debuginfo / oniguruma-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0782)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	critical
353721	Rocky Linux 8.6 [CIQ] Security Update: oniguruma / oniguruma-debuginfo / oniguruma-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0123)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	critical
131705	Debian DLA-2020-1 : libonig security update	Nessus	Debian Local Security Checks	2019/12/5	2024/4/5	critical
132735	Amazon Linux 2 : oniguruma (ALAS-2020-1380)	Nessus	Amazon Linux Local Security Checks	2020/1/9	2024/12/11	critical
145957	CentOS 8 : php:7.3 (CESA-2020:3662)	Nessus	CentOS Local Security Checks	2021/2/1	2024/1/24	critical
222839	Linux Distros Unpatched Vulnerability : CVE-2019-19204	Nessus	Misc.	2025/3/4	2026/9/2	high
294403	MiracleLinux 7 : rh-php73-php-7.3.20-1.el7 (AXSA:2020-958:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/21	critical
358880	Rocky Linux 8 [CIQ] Security Update: apcu-panel / libzip / libzip-debuginfo / libzip-debugsource / etc Multiple Vulnerabilities (crlsa-2020_3662)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/2	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

high

critical

critical