PT-2007-1501 · Pcre+1 · Pcre Library+1

Ludwig Nussel · Published 2007-11-29 · Updated 2017-10-11 · CVE-2006-7226

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PCRE library versions prior to 6.7

Description The issue arises from improper calculation of compiled memory allocation for regular expressions involving quantified subpatterns with named recursion or subroutine references. This allows context-dependent attackers to cause a denial of service, potentially leading to errors or crashes.

Recommendations For versions prior to 6.7, update to version 6.7 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-7226

RHSA-2007:1059

RHSA-2007:1068

RHSA-2007_1059

RHSA-2007_1068

Affected Products

Pcre Library

Red Hat

References · 32

• https://bdu.fstec.ru/vul/2015-02590 · Security Note
• https://bdu.fstec.ru/vul/2015-03061 · Security Note
• https://bdu.fstec.ru/vul/2015-02589 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-7226 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:030 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-1068.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-7226 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-7226 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04725 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-7226 · Security Note
• https://bdu.fstec.ru/vul/2015-09569 · Security Note
• https://bdu.fstec.ru/vul/2015-04724 · Security Note
• http://redhat.com/support/errata/RHSA-2007-1059.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04723 · Security Note