PT-2005-5614 · Pcre+2 · Pcre-Devel+4
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
pcre-32bit versions (affected versions not specified)
pcre versions (affected versions not specified)
pcre-devel versions (affected versions not specified)
Description
The issue concerns multiple vulnerabilities in the pcre package of the SUSE Linux Enterprise operating system, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The problem is related to the Perl-Compatible Regular Expression (PCRE) library, where a buffer overflow can be triggered by a regular expression with a large number of named subpatterns, causing a denial of service (crash).
Recommendations
For pcre-32bit, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For pcre, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For pcre-devel, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Red Hat
Suse Linux Enterprise
Pcre
Pcre-32Bit
Pcre-Devel