Onigmo through 6.2.0 has a NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - onigmo: out-of-bounds read in next_state_val() in regparse.c (CVE-2019-16162)

  - Onigmo through 6.2.0 has a NULL pointer dereference in onig_error_code_to_str because of fetch_token in     regparse.c. (CVE-2019-16161)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - onigmo: out-of-bounds read in next_state_val() in regparse.c (CVE-2019-16162)

  - Onigmo through 6.2.0 has a NULL pointer dereference in onig_error_code_to_str because of fetch_token in     regparse.c. (CVE-2019-16161)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Onigmo through 6.2.0 has a NULL pointer dereference in     onig_error_code_to_str because of fetch_token in     regparse.c.(CVE-2019-16161)

  - Onigmo through 6.2.0 has an out-of-bounds read in     parse_char_class because of missing codepoint     validation in regenc.c.(CVE-2019-16162)

  - An issue was discovered in Ruby through 2.5.8, 2.6.x     through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a     simple HTTP server bundled with Ruby, had not checked     the transfer-encoding header value rigorously. An     attacker may potentially exploit this issue to bypass a     reverse proxy (which also has a poor header check),     which may lead to an HTTP Request Smuggling     attack.(CVE-2020-25613)

  - There is an OS command injection vulnerability in Ruby     Rake < 12.3.3 in Rake::FileList when supplying a     filename that begins with the pipe character     `|`.(CVE-2020-8130)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ruby packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - A NULL pointer dereference vulnerability was found in     Onigmo in the way it handled certain types of 'subexp'     regular expressions. A remote attacker could exploit     this flaw by providing a malformed regular expression     that when processed by an application linked to Onigmo,     would crash the application, causing a denial of     service.(CVE-2019-16161)

  - An out-of-bounds read vulnerability was found in Onigmo     in the way it handled wide characters in regular     expressions. A remote attacker could exploit this flaw     by providing a malformed regular expression that when     processed by an application linked to Onigmo, would     crash the application and cause a denial of     service.(CVE-2019-16162)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ruby packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in Ruby through 2.5.8, 2.6.x     through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a     simple HTTP server bundled with Ruby, had not checked     the transfer-encoding header value rigorously. An     attacker may potentially exploit this issue to bypass a     reverse proxy (which also has a poor header check),     which may lead to an HTTP Request Smuggling     attack.(CVE-2020-25613)

  - Onigmo through 6.2.0 has an out-of-bounds read in     parse_char_class because of missing codepoint     validation in regenc.c.(CVE-2019-16162)

  - Onigmo through 6.2.0 has a NULL pointer dereference in     onig_error_code_to_str because of fetch_token in     regparse.c.(CVE-2019-16161)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Onigmo through 6.2.0 has a NULL pointer dereference in     onig_error_code_to_str because of fetch_token in     regparse.c.(CVE-2019-16161)

  - Onigmo through 6.2.0 has an out-of-bounds read in     parse_char_class because of missing codepoint     validation in regenc.c.(CVE-2019-16162)

  - An issue was discovered in Ruby through 2.5.8, 2.6.x     through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a     simple HTTP server bundled with Ruby, had not checked     the transfer-encoding header value rigorously. An     attacker may potentially exploit this issue to bypass a     reverse proxy (which also has a poor header check),     which may lead to an HTTP Request Smuggling     attack.(CVE-2020-25613)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Onigmo through 6.2.0 has a NULL pointer dereference in     onig_error_code_to_str because of fetch_token in     regparse.c.(CVE-2019-16161)

  - Onigmo through 6.2.0 has an out-of-bounds read in     parse_char_class because of missing codepoint     validation in regenc.c.(CVE-2019-16162)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in Ruby through 2.5.8, 2.6.x     through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a     simple HTTP server bundled with Ruby, had not checked     the transfer-encoding header value rigorously. An     attacker may potentially exploit this issue to bypass a     reverse proxy (which also has a poor header check),     which may lead to an HTTP Request Smuggling     attack.(CVE-2020-25613)

  - Onigmo through 6.2.0 has an out-of-bounds read in     parse_char_class because of missing codepoint     validation in regenc.c.(CVE-2019-16162)

  - Onigmo through 6.2.0 has a NULL pointer dereference in     onig_error_code_to_str because of fetch_token in     regparse.c.(CVE-2019-16161)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
202299	RHEL 7 : ruby (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
202294	RHEL 8 : ruby (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198400	RHEL 8 : ruby (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
151390	EulerOS Virtualization 3.0.2.2 : ruby (EulerOS-SA-2021-2167)	Nessus	Huawei Local Security Checks	high
147536	EulerOS Virtualization for ARM 64 3.0.2.0 : ruby (EulerOS-SA-2021-1387)	Nessus	Huawei Local Security Checks	high
147083	EulerOS Virtualization for ARM 64 3.0.6.0 : ruby (EulerOS-SA-2021-1540)	Nessus	Huawei Local Security Checks	high
146730	EulerOS 2.0 SP2 : ruby (EulerOS-SA-2021-1356)	Nessus	Huawei Local Security Checks	high
145133	EulerOS 2.0 SP3 : ruby (EulerOS-SA-2021-1117)	Nessus	Huawei Local Security Checks	high
144261	EulerOS 2.0 SP5 : ruby (EulerOS-SA-2020-2564)	Nessus	Huawei Local Security Checks	high
144156	EulerOS 2.0 SP8 : ruby (EulerOS-SA-2020-2532)	Nessus	Huawei Local Security Checks	high
142270	EulerOS 2.0 SP9 : ruby (EulerOS-SA-2020-2421)	Nessus	Huawei Local Security Checks	high
142258	EulerOS 2.0 SP9 : ruby (EulerOS-SA-2020-2439)	Nessus	Huawei Local Security Checks	high

Detections

Analytics

CVE-2019-16161

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high