PT-2005-5614 · Pcre+2 · Pcre-Devel+4

Chris Evans + 1 · Published 1970-01-01 · Updated 2023-02-13 · CVE-2005-4872

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions pcre-32bit versions (affected versions not specified) pcre versions (affected versions not specified) pcre-devel versions (affected versions not specified)

Description The issue concerns multiple vulnerabilities in the pcre package of the SUSE Linux Enterprise operating system, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The problem is related to the Perl-Compatible Regular Expression (PCRE) library, where a buffer overflow can be triggered by a regular expression with a large number of named subpatterns, causing a denial of service (crash).

Recommendations For pcre-32bit, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For pcre, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For pcre-devel, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-04723

BDU:2015-04724

BDU:2015-04725

CVE-2005-4872

RHSA-2007:1052

RHSA-2007_1052

Affected Products

Red Hat

Suse Linux Enterprise

Pcre

Pcre-32Bit

Pcre-Devel

References · 25

• https://nvd.nist.gov/vuln/detail/CVE-2005-4872 · Security Note
• http://secunia.com/advisories/27582 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04725 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-4872 · Vendor Advisory
• http://secunia.com/advisories/28658 · Vendor Advisory
• http://secunia.com/advisories/27773 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09569 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04724 · Security Note
• https://bdu.fstec.ru/vul/2015-04723 · Security Note
• http://secunia.com/advisories/27869 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-1052.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:030 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-4872 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-4872 · Vendor Advisory