Cybereason is now LevelBlue. Proven endpoint protection, now with greater scale and expanded capabilities. Learn More

Trustwave App Scanner Updates for December 2019

Our Knowledgebase Articles can now be viewed at: https://www3.trustwave.com/support/kb/

 

Web Server Vulnerabilities Updates

PHP Buffer Overflow Vulnerability

CVE-2019-19246

Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.