Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSD7033B42D-EF09-11E5-B766-14DAE9D210B8
HistoryFeb 09, 2016 - 12:00 a.m.

pcre -- stack buffer overflow

2016-02-0900:00:00
vuxml.freebsd.org
9

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.151 Low

EPSS

Percentile

95.8%

JSON

Philip Hazel reports:

PCRE does not validate that handling the (*ACCEPT) verb
will occur within the bounds of the cworkspace stack buffer, leading to
a stack buffer overflow.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchpcre< 8.38UNKNOWN
FreeBSDanynoarchpcre2< 10.20_1UNKNOWN

Related

nessus 16
f5 2
openvas 12
zdi 1
prion 1
veracode 1
osv 1
ubuntucve 1
debiancve 1
alpinelinux 1
cve 1
mageia 1
amazon 1
ibm 5
centos 1
oraclelinux 1
redhat 2
symantec 1
ubuntu 1
suse 2
nessus
nessus
Amazon Linux AMI : pcre (ALAS-2018-1076)
2018-09-07 00:00:00
openSUSE Security Update : pcre2 (openSUSE-2016-966)
2016-08-16 00:00:00
FreeBSD : pcre -- stack buffer overflow (7033b42d-ef09-11e5-b766-14dae9d210b8)
2016-03-21 00:00:00
f5
f5
K51440224 : PCRE vulnerability CVE-2016-3191
2016-10-12 00:00:00
SOL51440224 - PCRE vulnerability CVE-2016-3191
2016-10-12 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-441-1)
2023-03-08 00:00:00
Mageia: Security Advisory (MGASA-2016-0204)
2022-01-28 00:00:00
CentOS Update for pcre CESA-2016:1025 centos7
2016-05-17 00:00:00
zdi
zdi
PCRE Regular Expression Compilation Stack Buffer Overflow Remote Code Execution Vulnerability
2016-08-17 00:00:00
prion
prion
Stack overflow
2016-03-17 23:59:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:34:23
osv
osv
CVE-2016-3191
2016-03-17 23:59:00
ubuntucve
ubuntucve
CVE-2016-3191
2016-03-17 00:00:00
debiancve
debiancve
CVE-2016-3191
2016-03-17 23:59:00
alpinelinux
alpinelinux
CVE-2016-3191
2016-03-17 23:59:00
cve
cve
CVE-2016-3191
2016-03-17 23:59:00
mageia
mageia
Updated pcre packages fix security vulnerabilities
2016-05-24 01:00:58
amazon
amazon
Important: pcre
2018-09-05 20:42:00
ibm
ibm
Security Bulletin: IBM Netezza SQL Extensions is vulnerable to an OpenSource PCRE Vulnerability (CVE-2016-1283, CVE-2016-3191)
2019-10-18 03:10:29
Security Bulletin: Multiple vulnerabilities in PCRE library affect IBM Tealeaf Customer Experience
2018-06-16 20:03:39
Security Bulletin: Multiple vulnerabilities in PCRE affect PowerKVM
2018-06-18 01:32:32
centos
centos
pcre security update
2016-05-13 00:44:08
oraclelinux
oraclelinux
pcre security update
2016-05-11 00:00:00
redhat
redhat
(RHSA-2016:1025) Important: pcre security update
2016-05-11 11:17:05
(RHSA-2016:1132) Important: rh-mariadb100-mariadb security update
2016-05-26 08:10:09
symantec
symantec
SA128 : Multiple PCRE Vulnerabilities
2016-07-07 08:00:00
ubuntu
ubuntu
PCRE vulnerabilities
2016-03-29 00:00:00
suse
suse
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.151 Low

EPSS

Percentile

95.8%

JSON
Related for 7033B42D-EF09-11E5-B766-14DAE9D210B8
nessus16f52openvas12zdi1prion1veracode1osv1ubuntucve1debiancve1alpinelinux1cve1mageia1amazon1ibm5centos1oraclelinux1redhat2symantec1ubuntu1suse2