RHSA-2020%3A3662 — Vulnetix

RHSA-2020%3A3662 PUBLISHED CVSS 6.5 MEDIUM

An update for the php:7.3 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Risk Scores

CVSS 3.1

6.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected Products

Vendor	Product	Versions
	php
	apcu
	Red Hat Enterprise Linux AppStream (v. 8)
	php:7.3:8020020200715124551:ceb1cf90
	libzip

Exploit Intelligence

Heap-buffer-overflow in Oniguruma (function fetch_interval_quantifier) (github-poc)
Heap-buffer-overflow in Oniguruma (function fetch_interval_quantifier) (github-poc)
Heap-buffer-overflow in Oniguruma (function fetch_interval_quantifier) (github-poc)
Heap-buffer-overflow in Oniguruma (function fetch_interval_quantifier) (github-poc)
Heap-buffer-overflow in Oniguruma (function fetch_interval_quantifier) (github-poc)
Heap-buffer-overflow in Oniguruma (function fetch_interval_quantifier) (github-poc)
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read (github-poc)
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read (github-poc)
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read (github-poc)
Heap-buffer-overflow in Oniguruma (function gb18030_mbc_enc_len) (github-poc)

…and 30 more exploits

Timeline

Sep 8, 2020 CVE Published
Mar 13, 2026 CVE Updated
Apr 30, 2026 Distribution Patch
Apr 30, 2026 Distribution Patch
Apr 30, 2026 Security Advisory
May 1, 2026 Security Advisory
May 1, 2026 Security Advisory
May 1, 2026 Security Advisory
May 1, 2026 Security Advisory
May 1, 2026 Security Advisory
May 1, 2026 Security Advisory
May 1, 2026 Security Advisory

References

…and 5 more

Open in Interactive Console →