CVE-2011-1951

lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows remote attackers to cause a denial of service memory consumption via a message that does not match a regular expression...

PT-2011-3494 · Philip Hazel +1 · Pcre +1

Name of the Vulnerable Software and Affected Versions: syslog-ng versions prior to 3.2.4 Description: The issue allows remote attackers to cause a denial of service, specifically memory consumption, by sending a message that does not match a regular expression. This occurs when the global flag is...

PHP 5.3.6 closes five security holes !

The PHP developers have released PHP 5.3.6, a maintenance update to the PHP interpreter. Among over 60 bug fixes are a number of fixes for security related problems. A format string vulnerability in the phar extension of PHP 5.3.5, CVE-2011-1153, may allow attackers to view memory, cause a denial...

PCRE library buffer overflow

Buffer overflow on regular expresssion compilation...

PCRE compile workspace overflow

In versions of the PCRE regular expression library before 8.02, compiling a very large regular expression will overflow the workspace buffer. Although the code checks for the size of the compiled regular expression, the check only returns true after the end of the buffer has been overrun. The bug...

PCRE Library 8.02 Overflow

In versions of the PCRE regular expression library before 8.02, compiling a very large regular expression will overflow the workspace buffer. Although the code checks for the size of the compiled regular expression, the check only returns true after the end of the buffer has been overrun. The bug...

PCRE 6.2 - Regular Expression Compiling Workspace Buffer Overflow

PCRE 6.2 - Regular Expression Compiling Workspace Buffer Overflow source: https://www.securityfocus.com/bid/39974/info PCRE is prone to a buffer-overflow vulnerability because the library fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execut...

PCRE 6.2 - Regular Expression Compiling Workspace Buffer Overflow

source: https://www.securityfocus.com/bid/39974/info PCRE is prone to a buffer-overflow vulnerability because the library fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of an application using the PCRE...

USN-624-2: Erlang vulnerability

USN-624-1 fixed a vulnerability in PCRE. This update provides the corresponding update for Erlang. Original advisory details: Tavis Ormandy discovered that the PCRE library did not correctly handle certain in-pattern options. An attacker could cause applications linked against pcre3 to crash,...

Ubuntu Update for erlang vulnerability USN-624-2

Ubuntu Update for Linux kernel vulnerabilities USN-624-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN6242.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for erlang vulnerability USN-624-2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-624-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 9.10 : erlang vulnerability (USN-624-2)

USN-624-1 fixed a vulnerability in PCRE. This update provides the corresponding update for Erlang. Tavis Ormandy discovered that the PCRE library did not correctly handle certain in-pattern options. An attacker could cause applications linked against pcre3 to crash, leading to a denial of service...

SuSE9 Security Update : nmap (YOU Patch Number 12009)

nmap contains a copy of the pcre library. Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code. This...

CentOS 5 : pcre (CESA-2007:0967)

Updated pcre packages that correct two security flaws are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Multiple flaws were found in the way...

weblogic 10.0 里的pcre存在缓冲区溢出

No description provided by source...

PCRE 模块中的pcre_compile.c缓冲区溢出漏洞

No description provided by source...

PHP PCRE 模块导致远程执行任意代码

No description provided by source...

SLES10: Security update for pcre

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pcre pcre-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for pcre

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pcre pcre-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText...

SLES9: Security update for pcre

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pcre pcre-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013426 within...