Photon OS 1.0: Pcre PHSA-2018-1.0-0171

An update of the pcre package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0171. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121872;...

Arbitrary Code Execution

rh-mariadb100-mariadb is vulnerable to arbitrary code execution attacks. The vulnerability exists as a heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by...

PHP 7.0.x < 7.0.3 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.3. It is, therefore, affected by multiple vulnerabilities : - The Perl-Compatible Regular Expressions PCRE library is affected by multiple vulnerabilities related to the handling of regular...

PHP 5.6.x < 5.6.18 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.18. It is, therefore, affected by multiple vulnerabilities : - The Perl-Compatible Regular Expressions PCRE library is affected by multiple vulnerabilities related to the handling of regular...

PCRE 8.41 Buffer Overflow

Buffer Overflow in function match PCRE 8.41 CVE-2017-16231 Product Download: https://sourceforge.net/projects/pcre/files/pcre/ Vulnerability TypePSoBuffer Overflow Attack Type : local Vulnerability Description a pcretest load test PoC produces a crash overflow in the function match in pcreexec.c...

SUSE SLES12 Security Update : mariadb (SUSE-SU-2018:1781-2)

MariaDB was updated to 10.0.35 bsc1090518 Notable changes : PCRE updated to 8.42 XtraDB updated to 5.6.39-83.1 TokuDB updated to 5.6.39-83.1 InnoDB updated to 5.6.40 The embedded server library now supports SSL when connecting to remote servers bsc1088681, CVE-2018-2767 MDEV-15249 - Crash in MVCC...

SUSE-SU-2018:1781-2 Security update for mariadb

MariaDB was updated to 10.0.35 bsc1090518 Notable changes: PCRE updated to 8.42 XtraDB updated to 5.6.39-83.1 TokuDB updated to 5.6.39-83.1 InnoDB updated to 5.6.40 The embedded server library now supports SSL when connecting to remote servers bsc1088681, CVE-2018-2767 MDEV-15249 - Crash in MVCC...

Amazon Linux AMI : pcre (ALAS-2018-1076)

The compilebranch function in pcrecompile.c in PCRE 8.x and pcre2compile.c in PCRE2 mishandles patterns containing an ACCEPT substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow via a...

Important: pcre

Issue Overview: The pcrecompile function in pcrecompile.c in PCRE before 8.38 mishandles certain : nesting, which allows remote attackers to cause a denial of service CPU consumption or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp...

Photon OS 1.0: Binutils / File / Linux / Pcre / Shadow PHSA-2018-1.0-0171 (deprecated)

An update of 'shadow', 'binutils', 'pcre', 'file' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0171. The text itself is...

Important: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 security update

Red Hat JBoss Core Services Pack Apache Server 2.4.29 packages for Microsoft Windows and Oracle Solaris are now available. Red Hat Product Security has rated this release as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

Raptor WAF v0.5 - Web Application Firewall using DFA

Raptor is a Web application firewall made in C, uses DFA to block SQL injection, Cross site scripting and path traversal. to run: $ git clone https://github.com/CoolerVoid/raptorwaf $ cd raptorwaf; make; bin/raptor Note: Don't execute with "cd bin; ./raptor" use full path "bin/raptor" look detail...

Important Photon OS Security Update - PHSA-2018-0171

Updates of 'file', 'shadow', 'pcre', 'binutils' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0171

An update of 'shadow', 'binutils', 'pcre', 'file' packages of Photon OS has been released...

UBUNTU-CVE-2017-9118

PHP 7.1.5 has an Out of bounds access in phppcrereplaceimpl via a crafted pregreplace call...

PT-2019-8041 · Pcre +2 · Pcre +2

Name of the Vulnerable Software and Affected Versions: PCRE version 8.41 Description: The issue is related to a crash overflow in the function match in pcre exec.c due to a self-recursive call. This occurs after compiling and running a pcretest load test proof of concept. It's worth noting that...

EulerOS 2.0 SP3 : pcre (EulerOS-SA-2018-1167)

According to the versions of the pcre packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The pcreexec function in pcreexec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remote attackers to cause a denial...

SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2018:1781-1)

MariaDB was updated to 10.0.35 bsc1090518 Notable changes : - PCRE updated to 8.42 - XtraDB updated to 5.6.39-83.1 - TokuDB updated to 5.6.39-83.1 - InnoDB updated to 5.6.40 - The embedded server library now supports SSL when connecting to remote servers bsc1088681, CVE-2018-2767 - MDEV-15249 -...

Security Bulletin: Multiple vulnerabilities in PCRE affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in the PCRE library. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-8386 DESCRIPTION: PCRE is vulnerable to a heap-based buffer overflow, caused by the improper handling of the interaction of lookbehind assertions...

Security Bulletin: A vulnerability in PCRE affects IBM Tivoli Network Manager IP Edition (CVE-2016-1283)

Summary A vulnerabily has been addressed in the in PCRE component of IBM Tivoli Network Manager IP Edition. Vulnerability Details CVEID: CVE-2016-1283 DESCRIPTION: PCRE is vulnerable to a heap-based buffer overflow, caused by the improper handling of patterns by the pcrecompile2 function. By usin...