Debian Security Advisory DSA 1602-1 (pcre3)

The remote host is missing an update to pcre3 announced via advisory DSA 1602-1. OpenVAS Vulnerability Test $Id: deb16021.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1602-1 pcre3 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

GLSA-200807-03 : PCRE: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200807-03 PCRE: Buffer overflow Tavis Ormandy of the Google Security team reported a heap-based buffer overflow when compiling regular expression patterns containing 'Internal Option Settings' such as '?i'. Impact : A remote...

Fedora 9 : pcre-7.3-4.fc9 (2008-6110)

Fri Jul 4 2008 Tomas Hoger - 7.3-4 - Apply Tavis Ormandy's patch for CVE-2008-2371. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

PCRE 规则表达式堆缓冲区溢出漏洞

BUGTRAQ ID: 30087 CVE ID：CVE-2008-2371 CNCVE ID：CNCVE-20082371 PCREPerl兼容正则表达式库是一款开放源代码的软件，可提供正则表达式支持。 PCRE pcrecompile.c文件存在堆溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 当PCRE在启动模式下指定选项时，为了避免将其不需要编译到字节代码，如通过pcrecompile选项指定的方式传送回调用程序如/?ia|b/ ==...

Fedora 9 : glib2-2.16.4-1.fc9 (2008-6048)

From the release announcement: Update to PCRE 7.7 - fix a heap-based buffer overflow in PCRE CVE-2008-2371 Bug fixes: 528752 Win32 build and SSL not working 539074 Cannot get exit status with gspawncommandlinesync 316221 GLOCK warns about breaking strict-aliasing rules 519137 gslicedup macro need...

openSUSE 10 Security Update : pcre (pcre-5366)

Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code CVE-2008-2371. %NASLMINLEVEL 70300 C Tenable...

Fedora 8 : pcre-7.3-4.fc8 (2008-6111)

Fri Jul 4 2008 Tomas Hoger - 7.3-4 - Apply Tavis Ormandy's patch for CVE-2008-2371. - Tue Feb 12 2008 Tomas Hoger - 7.3-3 - Backport patch from upstream pcre 7.6 to address buffer overflow caused by 'a character class containing a very large number of characters with codepoints greater than 255...

CVE-2008-2371

Heap-based buffer overflow in pcrecompile.c in the Perl-Compatible Regular Expression PCRE library 7.7 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches...

Heap overflow

Heap-based buffer overflow in pcrecompile.c in the Perl-Compatible Regular Expression PCRE library 7.7 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches...

CVE-2008-2371

Heap-based buffer overflow in pcrecompile.c in the Perl-Compatible Regular Expression PCRE library 7.7 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches...

DEBIAN-CVE-2008-2371

Heap-based buffer overflow in pcrecompile.c in the Perl-Compatible Regular Expression PCRE library 7.7 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches...

CVE-2008-2371

Heap-based buffer overflow in pcrecompile.c in the Perl-Compatible Regular Expression PCRE library 7.7 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches...

CVE-2008-2371

CVE-2008-2371 describes a heap-based buffer overflow in the PCRE library (version 7.7) specifically in pcre_compile.c. This vulnerability can be triggered by a context-dependent attacker via a regular expression that begins with an option and contains multiple branches, potentially causing a deni...

CVE-2008-2371

Heap-based buffer overflow in pcrecompile.c in the Perl-Compatible Regular Expression PCRE library 7.7 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches...

CVE-2008-2371

Heap-based buffer overflow in pcrecompile.c in the Perl-Compatible Regular Expression PCRE library 7.7 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches...

PCRE: Buffer overflow

Background PCRE is a Perl-compatible regular expression library. GLib includes a copy of PCRE. Description Tavis Ormandy of the Google Security team reported a heap-based buffer overflow when compiling regular expression patterns containing "Internal Option Settings" such as "?i ". Impact A remot...

PT-2008-1088 · Pcre +1 · Pcre Library +1

Name of the Vulnerable Software and Affected Versions: PCRE library versions prior to 7.7 Description: The issue is related to a heap-based buffer overflow in the PCRE library, specifically in the pcre compile.c file. This allows context-dependent attackers to cause a denial of service or possibl...

PCRE pcre_compile.c文件堆溢出漏洞

CVECAN ID: CVE-2008-2371 PCRE（Perl兼容正则表达式）库是个开放源代码的软件，可提供正则表达式支持。 当PCRE在启动模式（pattern）指定选项的时候，为了防止将其不必要的编译到字节代码，会如pcrecompile选项所指定的方式传送回调用程序（也就是/?ia|b/ == /a|b/i）。如果模式包含有多个分支的话，就会意外的将新选项回传的过远，仅有第一个分支获得了新的标记，而在第二次编译传送的时候会一直设置新的标记，导致大小计算传送和实际的编译传送之间出现不匹配，这可能触发堆溢出。 PCRE 7.7 厂商补丁： Debian ------...

PCRE library buffer overflow

Buffer overflow on regular expression compiling...

[SECURITY] Fedora 8 Update: pcre-7.3-4.fc8

Perl-compatible regular expression library. PCRE has its own native API, but a set of "wrapper" functions that are base d on the POSIX API are also supplied in the library libpcreposix. Note that this just provides a POSIX calling interface to PCRE: the regular expressions themselves still follow...