UBUNTU-CVE-2015-8391

The pcrecompile function in pcrecompile.c in PCRE before 8.38 mishandles certain : nesting, which allows remote attackers to cause a denial of service CPU consumption or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object...

CVE-2015-8387

PCRE before 8.38 mishandles ?123 subroutine calls and related subroutine calls, which allows remote attackers to cause a denial of service integer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by...

PT-2015-7790 · Pcre +4 · Pcre +4

Name of the Vulnerable Software and Affected Versions: PCRE versions prior to 8.38 Description: The issue allows remote attackers to cause a denial of service infinite recursion or possibly have unspecified other impact via a crafted regular expression, such as the /?:|a|100x/ pattern and related...

PT-2015-7787 · Philip Hazel +4 · Pcre +4

Name of the Vulnerable Software and Affected Versions: PCRE versions prior to 8.38 Description: The issue concerns the mishandling of lookbehind assertions and mutually recursive subpatterns, allowing remote attackers to cause a denial of service buffer overflow or possibly have unspecified other...

PT-2015-7794 · Pcre +2 · Pcre +2

Name of the Vulnerable Software and Affected Versions: PCRE versions prior to 8.38 Description: The issue is related to the mishandling of certain conditions in regular expressions, which can be exploited by remote attackers to cause a denial of service due to an integer overflow. This can be...

UBUNTU-CVE-2015-8390

PCRE before 8.38 mishandles the : and \ substrings in character classes, which allows remote attackers to cause a denial of service uninitialized memory read or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by...

UBUNTU-CVE-2015-8380

The pcreexec function in pcreexec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegE...

PT-2015-3437 · Pcre +5 · Pcre +5

Name of the Vulnerable Software and Affected Versions: PCRE versions prior to 8.38 Description: The issue is related to the pcre compile function in the PCRE library, which mishandles certain : nesting in regular expressions. This can be exploited by remote attackers to cause a denial of service,...

pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19)

PCRE before 8.36 mishandles the /a\2|a\g/ pattern and related patterns with certain internal recursive back references, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a...

Oracle: Security Advisory (ELSA-2008-0522)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 201401-05

Gentoo Linux Local Security Checks GLSA 201401-05 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

PHP PCRE extension has multiple vulnerabilities

PHP is a widely used general-purpose scripting language that is particularly well suited for web development and can be embedded in HTML. PHP suffers from a heap buffer overflow and denial of service vulnerability in the PCRE extension, which can be exploited by an attacker to cause an applicatio...

Fedora 21 : pcre-8.35-14.fc21 (2015-14242)

This release fixes a heap overflow when compiling certain regular expressions with named refecences. This release fixes buffer overflows when compiling certain expressions. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Modular visual interface for GDB: GDB dashboard

Modular visual interface for GDB in Python This comes as a standalone single-file .gdbinit which, among the other things, enables a configurable dashboard showing the most relevant information during the program execution. Its main goal is to reduce the number of GDB commands issued to inspect th...

Apple iOS Libc TRE library memory corruption vulnerability (CNVD-2015-05567)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the Apple iOS Libc TRE, which allows an attacker to exploit the vulnerability to cause an application to process special rule expressions to execute arbitrary...

Apple iOS Libc TRE library memory corruption vulnerability (CNVD-2015-05565)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the Apple iOS Libc TRE, which allows an attacker to exploit the vulnerability to cause an application to process special rule expressions to execute arbitrary...

IPFire < 2.17 - Core Update 93 Multiple Vulnerabilities

IPFire is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

PHP Regular Expression Uninitialized Pointer Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of PHP. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of invalid regular expressions. The issue lies in the failure to properly initialize...

The vulnerability of the Moodle learning management system allows a hacker to trigger a service failure.

The vulnerability of the filter/mediaplugin/filter.php component of the Moodle learning management system is related to resource management errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to trigger a service failure using a specially crafted string...

Scientific Linux Security Update : grep on SL6.x i386/x86_64 (20150722)

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way grep parsed large lines of data. An attacker able to trick a user into running grep on a specially crafted data file could use this flaw to crash grep or, potentially, execute arbitrary code with the privilege...