Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2016-3191
HistoryMar 17, 2016 - 11:59 p.m.

Stack overflow

2016-03-1723:59:00
PRIOn knowledge base
www.prio-n.com
5

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.116 Low

EPSS

Percentile

95.1%

JSON

The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.

CPENameOperatorVersion
pcreeq8.34
pcreeq8.36
pcreeq8.33
pcreeq8.00
pcreeq8.30
pcreeq8.01
pcreeq8.10
pcreeq8.31
pcreeq8.21
pcreeq8.20
Rows per page:
1-10 of 191

Related

cve 1
freebsd 1
nessus 16
f5 2
zdi 1
openvas 12
alpinelinux 1
veracode 1
osv 1
ubuntucve 1
debiancve 1
mageia 1
amazon 1
ibm 5
centos 1
redhat 2
oraclelinux 1
symantec 1
ubuntu 1
suse 2
cve
cve
CVE-2016-3191
2016-03-17 23:59:00
freebsd
freebsd
pcre -- stack buffer overflow
2016-02-09 00:00:00
nessus
nessus
Amazon Linux AMI : pcre (ALAS-2018-1076)
2018-09-07 00:00:00
openSUSE Security Update : pcre2 (openSUSE-2016-966)
2016-08-16 00:00:00
FreeBSD : pcre -- stack buffer overflow (7033b42d-ef09-11e5-b766-14dae9d210b8)
2016-03-21 00:00:00
f5
f5
K51440224 : PCRE vulnerability CVE-2016-3191
2016-10-12 00:00:00
SOL51440224 - PCRE vulnerability CVE-2016-3191
2016-10-12 00:00:00
zdi
zdi
PCRE Regular Expression Compilation Stack Buffer Overflow Remote Code Execution Vulnerability
2016-08-17 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-441-1)
2023-03-08 00:00:00
Mageia: Security Advisory (MGASA-2016-0204)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for pcre (EulerOS-SA-2016-1023)
2020-01-23 00:00:00
alpinelinux
alpinelinux
CVE-2016-3191
2016-03-17 23:59:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:34:23
osv
osv
CVE-2016-3191
2016-03-17 23:59:00
ubuntucve
ubuntucve
CVE-2016-3191
2016-03-17 00:00:00
debiancve
debiancve
CVE-2016-3191
2016-03-17 23:59:00
mageia
mageia
Updated pcre packages fix security vulnerabilities
2016-05-24 01:00:58
amazon
amazon
Important: pcre
2018-09-05 20:42:00
ibm
ibm
Security Bulletin: IBM Netezza SQL Extensions is vulnerable to an OpenSource PCRE Vulnerability (CVE-2016-1283, CVE-2016-3191)
2019-10-18 03:10:29
Security Bulletin: Multiple vulnerabilities in PCRE library affect IBM Tealeaf Customer Experience
2018-06-16 20:03:39
Security Bulletin: Multiple vulnerabilities in PCRE affect PowerKVM
2018-06-18 01:32:32
centos
centos
pcre security update
2016-05-13 00:44:08
redhat
redhat
(RHSA-2016:1025) Important: pcre security update
2016-05-11 11:17:05
(RHSA-2016:1132) Important: rh-mariadb100-mariadb security update
2016-05-26 08:10:09
oraclelinux
oraclelinux
pcre security update
2016-05-11 00:00:00
symantec
symantec
SA128 : Multiple PCRE Vulnerabilities
2016-07-07 08:00:00
ubuntu
ubuntu
PCRE vulnerabilities
2016-03-29 00:00:00
suse
suse
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.116 Low

EPSS

Percentile

95.1%

JSON
Related for PRION:CVE-2016-3191
cve1freebsd1nessus16f52zdi1openvas12alpinelinux1veracode1osv1ubuntucve1debiancve1mageia1amazon1ibm5centos1redhat2oraclelinux1symantec1ubuntu1suse2