Exploitation Summary
EIP tracks 2 public exploits for CVE-2019-19012. PoCs published by ManhNDd, tarantula-team.
AI-analyzed exploit summary The repository contains a functional PoC in C that demonstrates an integer overflow vulnerability in Oniguruma's search_in_range function, leading to an out-of-bounds read. The PoC is well-documented with compilation instructions and a trigger example.
Description
An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a denial-of-service or information disclosure, or possibly have unspecified other impact, via a crafted regular expression.
Exploits (2)
The repository contains a functional PoC in C that demonstrates an integer overflow vulnerability in Oniguruma's search_in_range function, leading to an out-of-bounds read. The PoC is well-documented with compilation instructions and a trigger example.
The repository contains a functional C-based PoC for CVE-2019-19012, demonstrating an integer overflow in Oniguruma's regexec.c leading to an out-of-bounds read. The PoC includes detailed compilation instructions and a trigger pattern to reproduce the crash.
References (7)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H