Apple Mac OSX Regex Engine (TRE) - Stack Buffer Overflow (PoC)

Source: https://code.google.com/p/google-security-research/issues/detail?id=428 OS X Libc uses the slightly obscure TRE regex engine http://laurikari.net/tre/ If used in enhanced mode by passing the REGENHANCED flag to regcomp TRE supports arbitrary-width hex literals. Here is the code used to...

Apple Mac OSX Regex Engine (TRE) - Integer Signedness / Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=429 The OS X regex engine function tretnfarunparallel contains the following code: int tbytes; ... if !matchtags numtags = 0; else numtags = tnfa-numtags; ... int rbytes, pbytes, totalbytes; char tmpbuf; / Compute the...

MediaWiki Quiz Extension Denial of Service Vulnerability

MediaWiki is a free, web-based wiki engine developed and maintained by the Wikimedia Foundation and MediaWiki volunteers for the deployment of in-house knowledge management and content management systems.Quiz is an extension of the quiz builder. A security vulnerability exists in the MediaWiki Qu...

DEBIAN-CVE-2015-6587

The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service out-of-bounds read and crash via a crafted regular expression in a VLListAttributesN2 RPC...

CVE-2015-6736

The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters in a regular expression...

CVE-2015-6736

The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters in a regular expression...

CVE-2015-6736

The CVE-2015-6736 entry concerns the MediaWiki Quiz extension, where remote attackers can trigger a denial-of-service through regex metacharacters in a regular expression. Affected component: Quiz extension for MediaWiki. Root cause: improper handling of regex metacharacters leading to DoS. Impac...

CVE-2015-6736

The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters in a regular expression...

Flash - PCRE Regex Compilation Zero-Length Assertion Arbitrary Bytecode Execution

Flash - PCRE Regex Compilation Zero-Length Assertion Arbitrary Bytecode Execution Source: https://code.google.com/p/google-security-research/issues/detail?id=224&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id There’s an error in the PCRE engine version used in Flash that...

OpenAFS Denial of Service Vulnerability (CNVD-2015-05293)

OpenAFS is a distributed file system that allows sharing of archives and resources between systems over LANs and WANs. A security vulnerability exists in OpenAFS 1.6.12 and earlier versions of vlserver. A remote attacker can exploit this vulnerability to cause a denial of service out-of-bounds re...

The vulnerability of the Moodle learning management system allows a hacker to trigger a service failure.

The vulnerability of the filter/urltolink/filter.php sub-component of the Moodle learning management system is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending requests containing specially crafted regular...

USN-2694-1 pcre3 vulnerabilities

Michele Spagnuolo discovered that PCRE incorrectly handled certain regular expressions. A remote attacker could use this issue to cause applications using PCRE to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. CVE-2014-8964...

Google Chrome V8 Denial of Service Vulnerability (CNVD-2015-04888)

Google Chrome is the United States Google Google company developed a Web browser. Google V8 is one of the open source JavaScript engine. A security vulnerability exists in the regular-expression implementation of Google V8 used in versions of Google Chrome prior to 44.0.2403.89, which stems from ...

Stack overflow

The regular-expression implementation in Google V8, as used in Google Chrome before 44.0.2403.89, mishandles interrupts, which allows remote attackers to cause a denial of service application crash via crafted JavaScript code, as demonstrated by an error in garbage collection during allocation of...

rack-cors Gem Missing Anchor permits unauthorized CORS requests

Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then example.com.example.net as well as...

unicode.org XSS vulnerability

Vulnerable URL: http://unicode.org/cldr/utility/regex.jsp?a=\pNd%2B%28%5B%5B%3AWB%3DMB%3A%5D%5B%3AWB%3DMN%3A%5D%5D\pNd%2B%29%3F%22%3E%3Csvg%2Fonload%3Dalert%28%2Fxssposed%2F%29%3E=The+35+quick+brown+fox+jumped+over+1.234+lazy+dogs%3A+1%3A234. Details: Description| Value ---|--- Patched:| No Lates...

CVE-2015-5144

Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an 1 email message to the EmailValidator, a ...

SOL16831 - BSD regex library vulnerability CVE-2015-2305

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL995...

UBUNTU-CVE-2015-5073

Heap-based buffer overflow in the findfixedlength function in pcrecompile.c in PCRE before 8.38 allows remote attackers to cause a denial of service crash or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an...

PCRE 'compile_branch()' function heap buffer overflow vulnerability

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. PCRE suffers from a heap buffer overflow vulnerability in compilebranch. This vulnerability allows an attacker to execute arbitrary code i...