CVE-2008-2371
7.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
72.0%
Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches.
References
bugs.gentoo.org/show_bug.cgi?id=228091
ftp.gnome.org/pub/GNOME/sources/glib/2.16/glib-2.16.4.changes
lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
lists.apple.com/archives/security-announce/2009/May/msg00002.html
lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html
marc.info/?l=bugtraq&m=124654546101607&w=2
marc.info/?l=bugtraq&m=125631037611762&w=2
secunia.com/advisories/30916
secunia.com/advisories/30944
secunia.com/advisories/30945
secunia.com/advisories/30958
secunia.com/advisories/30961
secunia.com/advisories/30967
secunia.com/advisories/30972
secunia.com/advisories/30990
secunia.com/advisories/31200
secunia.com/advisories/32222
secunia.com/advisories/32454
secunia.com/advisories/32746
secunia.com/advisories/35074
secunia.com/advisories/35650
secunia.com/advisories/39300
security.gentoo.org/glsa/glsa-200811-05.xml
support.apple.com/kb/HT3216
support.apple.com/kb/HT3549
ubuntu.com/usn/usn-624-2
wiki.rpath.com/wiki/Advisories:rPSA-2008-0305
www.debian.org/security/2008/dsa-1602
www.gentoo.org/security/en/glsa/glsa-200807-03.xml
www.mandriva.com/security/advisories?name=MDVSA-2008:147
www.mandriva.com/security/advisories?name=MDVSA-2009:023
www.securityfocus.com/archive/1/497828/100/0/threaded
www.securityfocus.com/bid/30087
www.securityfocus.com/bid/31681
www.ubuntu.com/usn/usn-624-1
www.ubuntu.com/usn/usn-628-1
www.us-cert.gov/cas/techalerts/TA09-133A.html
www.vupen.com/english/advisories/2008/2005
www.vupen.com/english/advisories/2008/2006
www.vupen.com/english/advisories/2008/2336
www.vupen.com/english/advisories/2008/2780
www.vupen.com/english/advisories/2009/1297
www.vupen.com/english/advisories/2010/0833
www.redhat.com/archives/fedora-package-announce/2008-July/msg00105.html
www.redhat.com/archives/fedora-package-announce/2008-July/msg00123.html
Social References
More
Related
7.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
72.0%