{"id":"CVE-2019-13224","details":"A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.","modified":"2026-04-02T00:11:31.145665Z","published":"2019-07-10T14:15:11.607Z","related":["ALSA-2020:3662","ALSA-2024:0889","MGASA-2019-0253","MGASA-2020-0029","SUSE-SU-2022:3327-1","openSUSE-SU-2024:11111-1"],"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWCPDTZOIUKGMFAD5NAKUB7FPJFAIQN5/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SNL26OZSQRVLEO6JRNUVIMZTICXBNEQW/"},{"type":"WEB","url":"https://support.f5.com/csp/article/K00103182?utm_source=f5support&amp%3Butm_medium=RSS"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201911-03"},{"type":"ADVISORY","url":"https://support.f5.com/csp/article/K00103182"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/4088-1/"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2019/07/msg00013.html"},{"type":"FIX","url":"https://github.com/kkos/oniguruma/commit/0f7f61ed1b7b697e283e37bd2d731d0bd57adb55"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kkos/oniguruma","events":[{"introduced":"0"},{"last_affected":"83572e983928243d741f61ac290fc057d69fefc3"},{"fixed":"0f7f61ed1b7b697e283e37bd2d731d0bd57adb55"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"6.9.2-NA"}]}},{"type":"GIT","repo":"https://github.com/php/php-src","events":[{"introduced":"0221e9f827632942225586687a33cfd554860d5e"},{"fixed":"481520d3819b0b68b65539ff59b4bd2f018d6e5f"},{"introduced":"8148cbb78841c8ec0759c0836e7f35dec799d300"},{"fixed":"b4140bf64811b97af153a5d49a1d71677993a075"},{"introduced":"52ace952a1b65ca80fc2617f11c2fa6dd03f51bd"},{"fixed":"89dc78e0f0c1a4f27b889f232b109a3919ecf478"},{"introduced":"0"},{"last_affected":"5dc92c2117cafc61daaaaa240fd46c3ac33872a4"}],"database_specific":{"versions":[{"introduced":"7.1.0"},{"fixed":"7.1.32"},{"introduced":"7.2.0"},{"fixed":"7.2.23"},{"introduced":"7.3.0"},{"fixed":"7.3.9"},{"introduced":"0"},{"last_affected":"8.0"}]}}],"versions":["BEFORE_ARG_INFO","BEFORE_BIG_SYMBOL_CHANGE","BEFORE_EXP_MERGE","BEFORE_FD_REAPPLY","BEFORE_FD_REVERT","BEFORE_HANDLERS_RESHUFFLE","BEFORE_HEAD_NS_CHANGE","BEFORE_HEAD_NS_CHANGES_MERGE","BEFORE_IMPORT_OF_MYSQLND","BEFORE_IMPORT_OF_MYSQLND_IN_5_3","BEFORE_NEW_OBJECT_MODEL","BEFORE_NEW_OPERATOR_FIX","BEFORE_NEW_OUTPUT_API","BEFORE_NEW_PARAMETER_PARSE","BEFORE_NS_RULES_CHANGE","BEFORE_OBJECTS_STORE","BEFORE_PARAM_PARSING_CHANGE","BEFORE_PHP4_APACHE_MODULE_CHANGE","BEFORE_PRE_SHUTDOWN_REVERSE_PATCH","BEFORE_REAL_IMPORT_OF_MYSQLND","BEFORE_REMOVING_AI_COUNT_FINAL_STEP","BEFORE_REMOVING_GC_STEP1","BEFORE_REMOVING_GC_STEP2","BEFORE_RENAMING","BEFORE_SAPIFICATION_FEB_10_2000","BEFORE_SAPI_POST_PATCH_17_FEB_2000","BEFORE_STACK_PATCH","BEFORE_UNICODE_MERGE","CLOSED_BETA","ChangeLog","INITIAL_IMPORT_SOURCEFORGE","MODERN_SYMMETRIC_SESSION_BEHAVIOUR_20021003","NEWS","NEWS-cvs2svn","NEW_UI_API_BP","PHP-4.0-RC1","PHP-5.4.1-RC1","PHP_4_3_before_13561_fix","PHP_5_0_dev_before_13561_fix","PHP_5_2_15RC1","POST_64BIT_BRANCH_MERGE","POST_AST_MERGE","POST_NATIVE_TLS_MERGE","POST_PARAMETER_PARSING_API","POST_PHP7_EREG_MYSQL_REMOVALS","POST_PHP7_NSAPI_REMOVAL","POST_PHP7_REMOVALS","POST_PHPNG_MERGE","POST_SUBST_Z_MACROS","PRE_64BIT_BRANCH_MERGE","PRE_AST_MERGE","PRE_DELAYED_ARRAY_FETCH_PATCH","PRE_EIGHT_BYTE_ALLOC_PATCH","PRE_ENGINE2_SPLIT","PRE_FETCH_READ_PATCH","PRE_FILE_COMPILE_API_CHANGE","PRE_FUNC_RETURNS_OBJECT_PATCH","PRE_GRANULAR_GARBAGE_FIX","PRE_ISSET_PATCH","PRE_ISSET_TYPE","PRE_LIBMYSQL_REVERT","PRE_LIBZEND_TO_ZEND","PRE_METHOD_CALL_SEPERATE_FIX_PATCH","PRE_METHOD_DEREFERENCE_PATCH","PRE_NATIVE_TLS_MERGE","PRE_NEW_OCI8_EXTENSION","PRE_NEW_VM_GEN_PATCH","PRE_PARAMETER_PARSING_API","PRE_PHP7_EREG_MYSQL_REMOVALS","PRE_PHP7_NSAPI_REMOVAL","PRE_PHP7_REMOVALS","PRE_PHPNG_MERGE","PRE_RETURN_REF_MERGE","PRE_RETURN_REF_PATCH","PRE_SUBST_Z_MACROS","PRE_TSRM_MERGE_PATCH","PRE_USED_RETURN_VALUE_PATCH","PRE_ZEND_VM_DISPATCH_PATCH","RELEASE_0_1","RELEASE_0_10","RELEASE_0_11","RELEASE_0_1_1","RELEASE_0_2","RELEASE_0_2_0","RELEASE_0_2_1","RELEASE_0_2_2","RELEASE_0_2_3","RELEASE_0_2_4","RELEASE_0_3","RELEASE_0_4","RELEASE_0_5","RELEASE_0_5_2","RELEASE_0_5_3","RELEASE_0_6","RELEASE_0_7","RELEASE_0_9","RELEASE_0_90","RELEASE_0_91","RELEASE_0_9_0","RELEASE_0_9_1","RELEASE_0_9_2","RELEASE_0_9_3","RELEASE_0_9_4","RELEASE_0_9b","RELEASE_1_0","RELEASE_1_0RC1","RELEASE_1_0RC2","RELEASE_1_0_0RC1","RELEASE_1_0_1","RELEASE_1_0_2","RELEASE_1_0_3","RELEASE_1_0_4","RELEASE_1_0b1","RELEASE_1_0b2","RELEASE_1_0b3","RELEASE_1_1","RELEASE_1_1_0","RELEASE_1_1_1","RELEASE_1_2","RELEASE_1_2_0","RELEASE_1_2_1","RELEASE_1_2_2","RELEASE_1_2_3","RELEASE_1_2_4","RELEASE_1_2_5","RELEASE_1_2b5","RELEASE_1_3","RELEASE_1_3_1","RELEASE_1_3_5","RELEASE_1_3b2","RELEASE_1_3b3","RELEASE_1_3b6","RELEASE_1_4","RELEASE_1_5","RELEASE_2_0_0","RELEASE_2_0_0RC1","RELEASE_2_0_0a1","RELEASE_2_0_0a2","RELEASE_2_0_0b1","RELEASE_2_0_1","RELEASE_2_0_2","RETURN_REF_BP","SAFEGUARD_3_0_BETA1_RC1_26062002","SPL_ALPHA","SQLITE_4_3_20041227","ZEND_OPTIMIZER_B1","ZO_B1","before-sapi-split","dev","help","l","php-4.0.0","php-4.0.1","php-4.0.1RC","php-4.0.1RC2","php-4.0.1pl1","php-4.0.2","php-4.0.2RC1","php-4.0.3","php-4.0.3RC1","php-4.0.3RC2","php-4.0.4RC3","php-4.0.4RC4","php-4.0.4RC5","php-4.0.4RC6","php-4.0.4REL","php-4.0.4pl1","php-4.0.4pl1RC1","php-4.0.4pl1RC2","php-4.0.5","php-4.0.5RC1","php-4.0.5RC2","php-4.0.5RC3","php-4.0.5RC4","php-4.0.5RC5","php-4.0.5RC6","php-4.0.5RC7","php-4.0.5RC8","php-4.0.6","php-4.0.6RC1","php-4.0.6RC2","php-4.0.6RC3","php-4.0.6RC4","php-4.0.7RC1","php-4.0.7RC2","php-4.0.7RC3","php-4.0RC1","php-4.0RC2","php-4.0b1","php-4.0b2","php-4.0b3","php-4.0b3_RC2","php-4.0b3_RC3","php-4.0b3_RC4","php-4.0b3_RC5","php-4.0b4","php-4.0b4_rc1","php-4.0b4pl1","php-4.1.0","php-4.1.0RC1","php-4.1.0RC2","php-4.1.0RC3","php-4.1.0RC4","php-4.1.0RC5","php-4.1.1","php-4.1.2","php-4.2.0","php-4.2.0RC1","php-4.2.0RC2","php-4.2.0RC3","php-4.2.0RC4","php-4.2.1","php-4.2.1RC1","php-4.2.1RC2","php-4.2.2","php-4.2.3","php-4.2.3RC1","php-4.2.3RC2","php-4.3.0","php-4.3.0RC1","php-4.3.0RC2","php-4.3.0RC3","php-4.3.0RC4","php-4.3.0dev","php-4.3.0dev-ZendEngine2","php-4.3.0dev-ZendEngine2-Preview1","php-4.3.0dev_zend2_alpha1","php-4.3.0dev_zend2_alpha2","php-4.3.0dev_zend2_alpha3","php-4.3.0pre1","php-4.3.0pre2","php-4.3.1","php-4.3.10","php-4.3.10RC1","php-4.3.10RC2","php-4.3.11","php-4.3.11RC1","php-4.3.11RC2","php-4.3.2","php-4.3.2RC1","php-4.3.2RC2","php-4.3.2RC3","php-4.3.2RC4","php-4.3.3","php-4.3.3RC1","php-4.3.3RC2","php-4.3.3RC3","php-4.3.3RC4","php-4.3.4","php-4.3.4RC1","php-4.3.4RC2","php-4.3.4RC3","php-4.3.5","php-4.3.5RC1","php-4.3.5RC2","php-4.3.5RC3","php-4.3.5RC4","php-4.3.6","php-4.3.6RC1","php-4.3.6RC2","php-4.3.6RC3","php-4.3.7","php-4.3.7RC1","php-4.3.8","php-4.3.9","php-4.3.9RC1","php-4.3.9RC2","php-4.3.9RC3","php-4.4.0","php-4.4.0RC1","php-4.4.0RC2","php-4.4.1","php-4.4.1RC1","php-4.4.2","php-4.4.2RC1","php-4.4.2RC2","php-4.4.3","php-4.4.3RC1","php-4.4.3RC2","php-4.4.4","php-4.4.4RC1","php-4.4.5","php-4.4.5RC1","php-4.4.5RC2","php-4.4.6","php-4.4.6RC1","php-4.4.7","php-4.4.7RC1","php-4.4.8","php-4.4.8RC1","php-4.4.9","php-4.4.9RC1","php-5.0.0","php-5.0.0RC1","php-5.0.0RC1RC1","php-5.0.0RC1RC2","php-5.0.0RC2","php-5.0.0RC2RC1","php-5.0.0RC2RC2","php-5.0.0RC3","php-5.0.0RC3RC1","php-5.0.0RC3RC2","php-5.0.0RC4","php-5.0.0b1","php-5.0.0b2","php-5.0.0b2RC1","php-5.0.0b3","php-5.0.0b3RC1","php-5.0.0b3RC2","php-5.0.0b4","php-5.0.0b4RC1","php-5.0.1","php-5.0.1RC1","php-5.0.1RC2","php-5.0.1b1","php-5.0.2","php-5.0.2RC1","php-5.0.3","php-5.0.3RC1","php-5.0.3RC2","php-5.0.4","php-5.0.4RC1","php-5.0.4RC2","php-5.0.5","php-5.0.5RC1","php-5.0.5RC2","php-5.1.0","php-5.1.0RC1","php-5.1.0RC2","php-5.1.0RC2_PRE","php-5.1.0RC3","php-5.1.0RC4","php-5.1.0RC5","php-5.1.0RC6","php-5.1.0b1","php-5.1.0b2","php-5.1.0b3","php-5.1.1","php-5.1.2","php-5.1.2RC1","php-5.1.2RC2","php-5.1.3","php-5.1.3RC1","php-5.1.3RC2","php-5.1.3RC3","php-5.1.4","php-5.1.5","php-5.1.5RC1","php-5.1.6","php-5.2.0","php-5.2.0RC1","php-5.2.0RC2","php-5.2.0RC3","php-5.2.0RC4","php-5.2.0RC5","php-5.2.0RC6","php-5.2.1","php-5.2.10","php-5.2.10RC1","php-5.2.10RC2","php-5.2.11","php-5.2.11RC1","php-5.2.11RC2","php-5.2.11RC3","php-5.2.12","php-5.2.12RC1","php-5.2.12RC2","php-5.2.12RC3","php-5.2.12RC4","php-5.2.13","php-5.2.13RC1","php-5.2.13RC2","php-5.2.14","php-5.2.14RC1","php-5.2.14RC2","php-5.2.14RC3","php-5.2.15","php-5.2.15RC1","php-5.2.15RC2","php-5.2.16","php-5.2.17","php-5.2.1RC1","php-5.2.1RC2","php-5.2.1RC3","php-5.2.1RC4","php-5.2.2","php-5.2.2RC1","php-5.2.2RC2","php-5.2.3","php-5.2.3RC1","php-5.2.4","php-5.2.4RC1","php-5.2.4RC2","php-5.2.4RC3","php-5.2.5","php-5.2.5RC1","php-5.2.5RC2","php-5.2.6","php-5.2.6RC1","php-5.2.6RC2","php-5.2.6RC3","php-5.2.6RC4","php-5.2.6RC5","php-5.2.7","php-5.2.7RC1","php-5.2.7RC2","php-5.2.7RC3","php-5.2.7RC4","php-5.2.7RC5","php-5.2.8","php-5.2.9","php-5.2.9RC1","php-5.2.9RC2","php-5.2.9RC3","php-5.3.0","php-5.3.0RC1","php-5.3.0RC2","php-5.3.0RC3","php-5.3.0RC4","php-5.3.0alpha1","php-5.3.0alpha2","php-5.3.0alpha3","php-5.3.0beta1","php-5.3.1","php-5.3.10","php-5.3.11","php-5.3.11RC1","php-5.3.11RC2","php-5.3.12","php-5.3.13","php-5.3.14","php-5.3.14RC1","php-5.3.14RC2","php-5.3.15","php-5.3.15RC1","php-5.3.16","php-5.3.17","php-5.3.18","php-5.3.18RC1","php-5.3.19","php-5.3.19RC1","php-5.3.1RC1","php-5.3.1RC2","php-5.3.1RC3","php-5.3.1RC4","php-5.3.2","php-5.3.20","php-5.3.20RC1","php-5.3.21","php-5.3.21RC1","php-5.3.22","php-5.3.22RC1","php-5.3.22RC2","php-5.3.23","php-5.3.23RC1","php-5.3.24","php-5.3.24RC1","php-5.3.25","php-5.3.25RC1","php-5.3.26","php-5.3.26RC1","php-5.3.27","php-5.3.27RC1","php-5.3.28","php-5.3.29","php-5.3.29RC1","php-5.3.2RC1","php-5.3.2RC2","php-5.3.2RC3","php-5.3.3","php-5.3.3RC1","php-5.3.3RC2","php-5.3.3RC3","php-5.3.4","php-5.3.4RC1","php-5.3.4RC2","php-5.3.5","php-5.3.6","php-5.3.6RC1","php-5.3.6RC2","php-5.3.6RC3","php-5.3.7","php-5.3.7RC1","php-5.3.7RC2","php-5.3.7RC3","php-5.3.7RC4","php-5.3.7RC5","php-5.3.8","php-5.3.9","php-5.3.9RC1","php-5.3.9RC2","php-5.3.9RC3","php-5.3.9RC4","php-5.4.0","php-5.4.0RC1","php-5.4.0RC2","php-5.4.0RC3","php-5.4.0RC4","php-5.4.0RC5","php-5.4.0RC6","php-5.4.0RC7","php-5.4.0RC8","php-5.4.0alpha1","php-5.4.0alpha2","php-5.4.0alpha3","php-5.4.0beta1","php-5.4.0beta2","php-5.4.1","php-5.4.10","php-5.4.10RC1","php-5.4.11","php-5.4.11RC1","php-5.4.12","php-5.4.12RC1","php-5.4.12RC2","php-5.4.13","php-5.4.13RC1","php-5.4.14","php-5.4.14RC1","php-5.4.15","php-5.4.15RC1","php-5.4.16","php-5.4.16RC1","php-5.4.17","php-5.4.17RC1","php-5.4.18","php-5.4.18RC1","php-5.4.18RC2","php-5.4.19","php-5.4.1RC1","php-5.4.1RC2","php-5.4.2","php-5.4.20","php-5.4.20RC1","php-5.4.21","php-5.4.21RC1","php-5.4.22","php-5.4.22RC1","php-5.4.23","php-5.4.23RC1","php-5.4.24","php-5.4.24RC1","php-5.4.25","php-5.4.25RC1","php-5.4.26","php-5.4.26RC1","php-5.4.27","php-5.4.27RC1","php-5.4.28","php-5.4.28RC1","php-5.4.29","php-5.4.29RC1","php-5.4.3","php-5.4.30","php-5.4.30RC1","php-5.4.31","php-5.4.31RC1","php-5.4.32","php-5.4.32RC1","php-5.4.33","php-5.4.33RC1","php-5.4.34","php-5.4.35","php-5.4.36","php-5.4.37","php-5.4.38","php-5.4.39","php-5.4.4","php-5.4.40","php-5.4.41","php-5.4.42","php-5.4.43","php-5.4.44","php-5.4.45","php-5.4.4RC1","php-5.4.4RC2","php-5.4.5","php-5.4.5RC1","php-5.4.6","php-5.4.6RC1","php-5.4.7","php-5.4.7RC1","php-5.4.8","php-5.4.8RC1","php-5.4.9","php-5.4.9RC1","php-5.5.0","php-5.5.0RC1","php-5.5.0RC2","php-5.5.0RC3","php-5.5.0alpha1","php-5.5.0alpha2","php-5.5.0alpha3","php-5.5.0alpha4","php-5.5.0alpha5","php-5.5.0alpha6","php-5.5.0beta1","php-5.5.0beta2","php-5.5.0beta3","php-5.5.0beta4","php-5.5.1","php-5.5.10","php-5.5.10RC1","php-5.5.11","php-5.5.11RC1","php-5.5.12","php-5.5.12RC1","php-5.5.13","php-5.5.13RC1","php-5.5.14","php-5.5.14RC1","php-5.5.15","php-5.5.15RC1","php-5.5.16","php-5.5.16RC1","php-5.5.17","php-5.5.17RC1","php-5.5.18","php-5.5.18RC1","php-5.5.19","php-5.5.19RC1","php-5.5.2","php-5.5.20","php-5.5.20RC1","php-5.5.21","php-5.5.21RC1","php-5.5.22","php-5.5.22RC1","php-5.5.23","php-5.5.23RC1","php-5.5.24","php-5.5.24RC1","php-5.5.25","php-5.5.25RC1","php-5.5.26","php-5.5.26RC1","php-5.5.27","php-5.5.27RC1","php-5.5.28","php-5.5.29","php-5.5.2RC1","php-5.5.3","php-5.5.30","php-5.5.31","php-5.5.32","php-5.5.33","php-5.5.34","php-5.5.35","php-5.5.36","php-5.5.37","php-5.5.38","php-5.5.4","php-5.5.4RC1","php-5.5.5","php-5.5.5RC1","php-5.5.6","php-5.5.6RC1","php-5.5.7","php-5.5.7RC1","php-5.5.8","php-5.5.8RC1","php-5.5.9","php-5.5.9RC1","php-5.6.0","php-5.6.0RC1","php-5.6.0RC2","php-5.6.0RC3","php-5.6.0RC4","php-5.6.0alpha1","php-5.6.0alpha2","php-5.6.0alpha3","php-5.6.0beta1","php-5.6.0beta2","php-5.6.0beta3","php-5.6.0beta4","php-5.6.1","php-5.6.10","php-5.6.10RC1","php-5.6.11","php-5.6.11RC1","php-5.6.12","php-5.6.12RC1","php-5.6.13","php-5.6.13RC1","php-5.6.14","php-5.6.14RC1","php-5.6.15","php-5.6.15RC1","php-5.6.16","php-5.6.16RC1","php-5.6.17","php-5.6.17RC1","php-5.6.18","php-5.6.18RC1","php-5.6.19","php-5.6.19RC1","php-5.6.1RC1","php-5.6.2","php-5.6.20","php-5.6.20RC1","php-5.6.21","php-5.6.21RC1","php-5.6.22","php-5.6.22RC1","php-5.6.23","php-5.6.23RC1","php-5.6.24","php-5.6.24RC1","php-5.6.25","php-5.6.25RC1","php-5.6.26","php-5.6.26RC1","php-5.6.27","php-5.6.27RC1","php-5.6.28","php-5.6.28RC1","php-5.6.29","php-5.6.29RC1","php-5.6.3","php-5.6.30","php-5.6.30RC1","php-5.6.31","php-5.6.32","php-5.6.33","php-5.6.34","php-5.6.35","php-5.6.36","php-5.6.37","php-5.6.38","php-5.6.39","php-5.6.3RC1","php-5.6.4","php-5.6.40","php-5.6.4RC1","php-5.6.5","php-5.6.5RC1","php-5.6.6","php-5.6.6RC1","php-5.6.7","php-5.6.7RC1","php-5.6.8","php-5.6.8RC1","php-5.6.9","php-5.6.9RC1","php-7.0.0","php-7.0.0RC1","php-7.0.0RC2","php-7.0.0RC3","php-7.0.0RC4","php-7.0.0RC5","php-7.0.0RC6","php-7.0.0RC7","php-7.0.0RC8","php-7.0.0alpha1","php-7.0.0alpha2","php-7.0.0beta1","php-7.0.0beta2","php-7.0.0beta3","php-7.0.1","php-7.0.10","php-7.0.10RC1","php-7.0.11","php-7.0.11RC1","php-7.0.12","php-7.0.12RC1","php-7.0.13","php-7.0.13RC1","php-7.0.14","php-7.0.14RC1","php-7.0.15","php-7.0.15RC1","php-7.0.16","php-7.0.16RC1","php-7.0.17","php-7.0.17RC1","php-7.0.18","php-7.0.18RC1","php-7.0.19","php-7.0.19RC1","php-7.0.1RC1","php-7.0.2","php-7.0.20","php-7.0.20RC1","php-7.0.21","php-7.0.21RC1","php-7.0.22","php-7.0.22RC1","php-7.0.23","php-7.0.23RC1","php-7.0.24","php-7.0.24RC1","php-7.0.25","php-7.0.25RC1","php-7.0.26","php-7.0.26RC1","php-7.0.27","php-7.0.27RC1","php-7.0.28","php-7.0.29","php-7.0.2RC1","php-7.0.3","php-7.0.30","php-7.0.31","php-7.0.32","php-7.0.33","php-7.0.3RC1","php-7.0.4","php-7.0.4RC1","php-7.0.5","php-7.0.5RC1","php-7.0.6","php-7.0.6RC1","php-7.0.7","php-7.0.7RC1","php-7.0.8","php-7.0.8RC1","php-7.0.9","php-7.0.9RC1","php-7.1.0","php-7.1.0RC1","php-7.1.0RC2","php-7.1.0RC3","php-7.1.0RC4","php-7.1.0RC5","php-7.1.0RC6","php-7.1.0alpha1","php-7.1.0alpha2","php-7.1.0alpha3","php-7.1.0beta1","php-7.1.0beta2","php-7.1.0beta3","php-7.1.1","php-7.1.10","php-7.1.10RC1","php-7.1.11","php-7.1.11RC1","php-7.1.12","php-7.1.12RC1","php-7.1.13","php-7.1.13RC1","php-7.1.14","php-7.1.14RC1","php-7.1.15","php-7.1.15RC1","php-7.1.16","php-7.1.16RC1","php-7.1.17","php-7.1.17RC1","php-7.1.18","php-7.1.18RC1","php-7.1.19","php-7.1.19RC1","php-7.1.1RC1","php-7.1.2","php-7.1.20","php-7.1.20RC1","php-7.1.21","php-7.1.21RC1","php-7.1.22","php-7.1.22RC1","php-7.1.23","php-7.1.23RC1","php-7.1.24","php-7.1.24RC1","php-7.1.25","php-7.1.25RC1","php-7.1.26","php-7.1.27","php-7.1.28","php-7.1.29","php-7.1.2RC1","php-7.1.3","php-7.1.30","php-7.1.31","php-7.1.3RC1","php-7.1.4","php-7.1.4RC1","php-7.1.5","php-7.1.5RC1","php-7.1.6","php-7.1.6RC1","php-7.1.7","php-7.1.7RC1","php-7.1.8","php-7.1.8RC1","php-7.1.9","php-7.1.9RC1","php-7.2.0","php-7.2.0RC1","php-7.2.0RC2","php-7.2.0RC3","php-7.2.0RC4","php-7.2.0RC5","php-7.2.0RC6","php-7.2.0alpha1","php-7.2.0alpha2","php-7.2.0alpha3","php-7.2.0beta1","php-7.2.0beta2","php-7.2.0beta3","php-7.2.1","php-7.2.10","php-7.2.10RC1","php-7.2.11","php-7.2.11RC1","php-7.2.12","php-7.2.12RC1","php-7.2.13","php-7.2.13RC1","php-7.2.14","php-7.2.14RC1","php-7.2.15","php-7.2.15RC1","php-7.2.16","php-7.2.16RC1","php-7.2.17","php-7.2.17RC1","php-7.2.18","php-7.2.18RC1","php-7.2.19","php-7.2.19RC1","php-7.2.1RC1","php-7.2.2","php-7.2.20","php-7.2.20RC1","php-7.2.20RC2","php-7.2.21","php-7.2.21RC1","php-7.2.22","php-7.2.22RC1","php-7.2.23RC1","php-7.2.24","php-7.2.24RC1","php-7.2.2RC1","php-7.2.3","php-7.2.3RC1","php-7.2.4","php-7.2.4RC1","php-7.2.5","php-7.2.5RC1","php-7.2.6","php-7.2.6RC1","php-7.2.7","php-7.2.7RC1","php-7.2.8","php-7.2.8RC1","php-7.2.9","php-7.2.9RC1","php-7.3.0","php-7.3.0RC1","php-7.3.0RC2","php-7.3.0RC3","php-7.3.0RC4","php-7.3.0RC5","php-7.3.0RC6","php-7.3.0alpha1","php-7.3.0alpha2","php-7.3.0alpha3","php-7.3.0alpha4","php-7.3.0beta1","php-7.3.0beta2","php-7.3.0beta3","php-7.3.1","php-7.3.10","php-7.3.10RC1","php-7.3.11","php-7.3.11RC1","php-7.3.1RC1","php-7.3.2","php-7.3.2RC1","php-7.3.3","php-7.3.3RC1","php-7.3.4","php-7.3.4RC1","php-7.3.5","php-7.3.5RC1","php-7.3.6","php-7.3.6RC1","php-7.3.7","php-7.3.7RC1","php-7.3.7RC2","php-7.3.7RC3","php-7.3.8","php-7.3.8RC1","php-7.3.9RC1","php-7.4.0RC1","php-7.4.0RC2","php-7.4.0RC3","php-7.4.0RC4","php-7.4.0alpha1","php-7.4.0alpha2","php-7.4.0alpha3","php-7.4.0beta1","php-7.4.0beta2","php-7.4.0beta4","php4","php5_5_0","php_ibase_before_split","v5.9.6","v5.9.6_p1","v6.0.0","v6.1.0","v6.1.1","v6.1.2","v6.1.3","v6.2.0","v6.3.0","v6.4.0","v6.5.0","v6.6.0","v6.6.1","v6.7.0","v6.7.1","v6.8.0","v6.8.1","v6.8.2","v6.9.0","v6.9.1","v6.9.2","v6.9.2_rc1","v6.9.2_rc2","v6.9.2_rc3","xmlrpc_epi_0_51_merge_pt"],"database_specific":{"vanir_signatures":[{"target":{"file":"src/regext.c"},"id":"CVE-2019-13224-69a60e05","signature_version":"v1","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["144477375847041035196488014531602342496","39487835141121000899975727629951651164","243574904145470851950892010676215846309","261101043450223522914619713906777460104","192845130568107495712244117068883375560","38824287918157113434026198298701563168","44502028448723226475273193052058068900","57330471737783644434537330796049609549","265399586591815778503620908494229098639","17751534671408493758106039438651136950","42363307028960740653651765099861536532"]},"source":"https://github.com/kkos/oniguruma/commit/0f7f61ed1b7b697e283e37bd2d731d0bd57adb55","signature_type":"Line"},{"target":{"function":"onig_new_deluxe","file":"src/regext.c"},"id":"CVE-2019-13224-b47700ae","signature_version":"v1","deprecated":false,"digest":{"function_hash":"16716532786252836573114105484968648519","length":884},"source":"https://github.com/kkos/oniguruma/commit/0f7f61ed1b7b697e283e37bd2d731d0bd57adb55","signature_type":"Function"}],"unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"29"}]},{"events":[{"introduced":"0"},{"last_affected":"30"}]},{"events":[{"introduced":"0"},{"last_affected":"12.04"}]},{"events":[{"introduced":"0"},{"last_affected":"14.04"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-13224.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}