CVE-2017-6004

CVE-2017-6004 affects PCRE (PCRE 8.x prior to rev 1680; e.g., PHP 7.1.1 bundled) where compile_bracket_matchingpath in pcre_jit_compile.c can be triggered by a crafted regular expression to cause an out-of-bounds read and application crash, i.e., a denial of service. Remediation: upgrade to a fix...

CVE-2014-9769

pcrejitcompile.c in PCRE 8.35 does not properly use table jumps to optimize nested alternatives, which allows remote attackers to cause a denial of service stack memory corruption or possibly have unspecified other impact via a crafted string, as demonstrated by packets encountered by Suricata...