Lucene search
K

PCRE Library 8.02 Overflow

🗓️ 07 May 2010 00:00:00Reported by Michael SantosType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 25 Views

PCRE Library 8.02 Overflow, workspace buffer overrun fi

Code
`  
In versions of the PCRE regular expression library before 8.02, compiling  
a very large regular expression will overflow the workspace buffer.  
  
Although the code checks for the size of the compiled regular expression,  
the check only returns true after the end of the buffer has been  
overrun. The bug was fixed in PCRE 8.02 with this patch:  
  
http://vcs.pcre.org/viewvc/code/trunk/pcre_compile.c?r1=504&r2=505&view=patch  
  
This example will cause a 2 byte overflow:  
  
~$ perl -e 'print "/","("x819, ")"x819, "/"' | pcretest  
  
Original Bug Report:  
  
http://bugs.exim.org/show_bug.cgi?id=962  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

07 May 2010 00:00Current
0.9Low risk
Vulners AI Score0.9
25