CVE:CVE-2019-19246
CNNVD:CNNVD-201911-1345
Oniguruma是一款开源的正则表达式库。
Oniguruma 6.9.3及之前版本（使用在PHP 7.3.x版本及其他产品）中的regexec.c文件的str_lower_case_match功能存在缓冲区错误漏洞，该漏洞源于程序没有正确检查边界。远程攻击者可利用该漏洞在系统上执行任意代码，或导致应用程序崩溃。
solution:Upgrade oniguruma_project oniguruma to a higher version than 6.9.3,and avoid the version (,6.9.3]; Upgrade php php to a higher version than 7.3.10,and avoid the version [7.3.0,7.3.10); Upgrade fedoraproject fedora to a higher version than 31,and avoid the version 31; Upgrade canonical ubuntu_linux to a higher version than 14.04,and avoid the version 14.04; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0