PT-2016-4684 · Philip Hazel+3 · Pcre+3

Publicado

2016-01-02

·

Atualizado

2022-07-20

·

CVE-2016-1283

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PCRE version 8.38 PCRE (affected versions not specified)
Description The issue concerns a heap-based buffer overflow in the pcre compile2 function, which can be triggered by crafted regular expressions, potentially leading to a denial of service or other unspecified impacts. This can be exploited via a crafted regular expression, for example, using a JavaScript RegExp object.
Recommendations For PCRE version 8.38, consider updating to a newer version that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2016-1611
ALT-PU-2017-2569
ALT-PU-2017-2581
CVE-2016-1283
MGASA-2016-0204
OPENSUSE-SU-2024:10277-1
RHSA-2016:1132
SUSE-SU-2016:2971-1
SUSE-SU-2016:3161-1
SUSE-SU-2017:2699-1
SUSE-SU-2017:2700-1
USN-2943-1

Produtos afetados

Alt Linux
Pcre
Suse
Ubuntu