PT-2007-1501 · Pcre+1 · Pcre Library+1

Ludwig Nussel · Publicado 2007-11-29 · Atualizado 2017-10-11 · CVE-2006-7226

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PCRE library versions prior to 6.7

Description The issue arises from improper calculation of compiled memory allocation for regular expressions involving quantified subpatterns with named recursion or subroutine references. This allows context-dependent attackers to cause a denial of service, potentially leading to errors or crashes.

Recommendations For versions prior to 6.7, update to version 6.7 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-7226

RHSA-2007:1059

RHSA-2007:1068

RHSA-2007_1059

RHSA-2007_1068

Produtos afetados

Pcre Library

Red Hat

Referências · 32

• https://access.redhat.com/security/cve/CVE-2007-1659 · Nota
• https://bdu.fstec.ru/vul/2015-02590 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03061 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2006-7225 · Nota
• https://access.redhat.com/errata/RHSA-2007:1059 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=384781 · Nota
• https://bdu.fstec.ru/vul/2015-02589 · Nota de Segurança
• http://pcre.org/changelog.txt · Nota
• http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40020 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-7226 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-7228 · Nota
• https://access.redhat.com/security/cve/CVE-2006-7226 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2008:030 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2007-1068.html · Aviso do Fabricante