Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2016:1025
HistoryMay 13, 2016 - 12:44 a.m.

pcre security update

2016-05-1300:44:08
CentOS Project
lists.centos.org
101

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:P/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.151

Percentile

95.9%

JSON

CentOS Errata and Security Advisory CESA-2016:1025

PCRE is a Perl-compatible regular expression library.

Security Fix(es):

  • Multiple flaws were found in the way PCRE handled malformed regular expressions. An attacker able to make an application using PCRE process a specially crafted regular expression could use these flaws to cause the application to crash or, possibly, execute arbitrary code. (CVE-2015-8385, CVE-2016-3191, CVE-2015-2328, CVE-2015-3217, CVE-2015-5073, CVE-2015-8388, CVE-2015-8391, CVE-2015-8386)

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2016-May/084045.html

Affected packages:
pcre
pcre-devel
pcre-static
pcre-tools

Upstream details at:
https://access.redhat.com/errata/RHSA-2016:1025

Related

nessus 41
oraclelinux 1
ibm 16
openvas 19
redhat 3
amazon 4
fedora 6
f5 6
veracode 34
prion 8
cvelist 8
cve 8
ubuntu 2
nvd 8
debiancve 8
gentoo 1
ubuntucve 13
openwrt 1
symantec 1
freebsd 4
mageia 2
osv 1
zdi 1
alpinelinux 1
securityvulns 2
nessus
nessus
Scientific Linux Security Update : pcre on SL7.x x86_64 (20160511)
2016-05-12 00:00:00
EulerOS 2.0 SP1 : pcre (EulerOS-SA-2016-1023)
2017-05-01 00:00:00
RHEL 7 : pcre (RHSA-2016:1025)
2016-05-12 00:00:00
oraclelinux
oraclelinux
pcre security update
2016-05-11 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in PCRE affect PowerKVM
2018-06-18 01:32:32
Security Bulletin: IBM® Db2® is affected by multiple vulnerabilities in the consumed PCRE library.
2023-12-20 20:15:48
Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by a vulnerabilty in PCRE (CVE-2015-3217)
2023-12-07 22:31:02
openvas
openvas
CentOS Update for pcre CESA-2016:1025 centos7
2016-05-17 00:00:00
Huawei EulerOS: Security Advisory for pcre (EulerOS-SA-2016-1023)
2020-01-23 00:00:00
RedHat Update for pcre RHSA-2016:1025-01
2016-06-03 00:00:00
redhat
redhat
(RHSA-2016:1025) Important: pcre security update
2016-05-11 11:17:05
(RHSA-2016:1132) Important: rh-mariadb100-mariadb security update
2016-05-26 08:10:09
(RHSA-2016:2750) Moderate: rh-php56 security, bug fix, and enhancement update
2016-11-15 11:13:31
amazon
amazon
Important: pcre
2018-09-05 20:42:00
Medium: glib2
2023-06-07 23:52:00
Medium: pcre
2023-06-05 16:39:00
fedora
fedora
[SECURITY] Fedora 22 Update: mingw-pcre-8.38-1.fc22
2016-02-17 04:25:54
[SECURITY] Fedora 23 Update: mingw-pcre-8.38-1.fc23
2016-02-17 04:01:55
[SECURITY] Fedora 22 Update: pcre-8.38-1.fc22
2016-01-04 19:59:47
f5
f5
K20225390 : Multiple PCRE vulnerabilities
2016-02-04 00:00:00
SOL20225390 - Multiple PCRE vulnerabilities
2016-02-04 00:00:00
SOL17331 - PCRE library vulnerability CVE-2015-5073
2015-09-29 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:34:19
Denial Of Service (DoS)
2019-05-02 05:34:19
Denial Of Service (DoS)
2019-05-02 05:34:18
prion
prion
Buffer overflow
2015-12-02 01:59:00
Buffer overflow
2015-12-02 01:59:00
Code injection
2015-12-02 01:59:00
cvelist
cvelist
CVE-2015-8391
2015-12-02 00:00:00
CVE-2015-8388
2015-12-02 01:00:00
CVE-2015-8386
2015-12-02 00:00:00
cve
cve
CVE-2015-8391
2015-12-02 01:59:15
CVE-2015-8386
2015-12-02 01:59:10
CVE-2015-8388
2015-12-02 01:59:12
ubuntu
ubuntu
PCRE vulnerabilities
2016-03-29 00:00:00
PCRE vulnerabilities
2015-07-29 00:00:00
nvd
nvd
CVE-2015-8388
2015-12-02 01:59:12
CVE-2015-2328
2015-12-02 01:59:01
CVE-2015-8391
2015-12-02 01:59:15
debiancve
debiancve
CVE-2015-8388
2015-12-02 01:59:12
CVE-2015-8391
2015-12-02 01:59:15
CVE-2015-8386
2015-12-02 01:59:10
gentoo
gentoo
libpcre: Multiple Vulnerabilities
2016-07-09 00:00:00
ubuntucve
ubuntucve
CVE-2015-8391
2015-12-01 00:00:00
CVE-2015-8388
2015-12-01 00:00:00
CVE-2015-8386
2015-12-01 00:00:00
openwrt
openwrt
pcre: Security update (18 CVEs)
2016-01-28 12:40:02
symantec
symantec
SA128 : Multiple PCRE Vulnerabilities
2016-07-07 08:00:00
freebsd
freebsd
pcre -- Heap Overflow Vulnerability in find_fixedlength()
2015-06-23 00:00:00
pcre -- stack buffer overflow
2016-02-09 00:00:00
pcre -- multiple vulnerabilities
2015-05-29 00:00:00
mageia
mageia
Updated pcre package fixes security vulnerability
2015-07-05 20:22:03
Updated pcre packages fix security vulnerabilities
2016-05-24 01:00:58
osv
osv
CVE-2016-3191
2016-03-17 23:59:00
zdi
zdi
PCRE Regular Expression Compilation Stack Buffer Overflow Remote Code Execution Vulnerability
2016-08-17 00:00:00
alpinelinux
alpinelinux
CVE-2016-3191
2016-03-17 23:59:01
securityvulns
securityvulns
PCRE multiple security vulnerabilities
2015-08-02 00:00:00
[USN-2694-1] PCRE vulnerabilities
2015-08-02 00:00:00

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:P/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.151

Percentile

95.9%

JSON
Related for CESA-2016:1025
nessus41oraclelinux1ibm16openvas19redhat3amazon4fedora6f56veracode34prion8cvelist8cve8ubuntu2nvd8debiancve8gentoo1ubuntucve13openwrt1symantec1freebsd4mageia2osv1zdi1alpinelinux1securityvulns2