195 matches found
OESA-2023-1928 perl security update
Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fixes: In Perl before 5.38.2, Sparseunipropstri...
Perl regcomp Heap Buffer Overflow
The vulnerability of the SParseunipropstring function in the regcomp.c file of the Perl interpreter is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...
Code injection
In Perl before 5.38.2, Sparseunipropstring in regcomp.c can write to unallocated space because a property name associated with a \p... regular expression construct is mishandled. The earliest affected version is 5.30.0...
OSV-2023-889 Heap-double-free in regcomp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62529 Crash type: Heap-double-free Crash state: regcomp fileregcomp load1...
PT-2023-36028 · Git +1 · File
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Heap-double-free. The crash state involves functions such as regcomp, file regcomp, and load 1. No...
file:magic_fuzzer_loaddb: Heap-double-free in regcomp
Detailed Report: https://oss-fuzz.com/testcase?key=5198448548511744 Project: file Fuzzing Engine: libFuzzer Fuzz Target: magicfuzzerloaddb Job Type: libfuzzerasani386file Platform Id: linux Crash Type: Heap-double-free Crash Address: 0xe6f3f800 Crash State: regcomp fileregcomp load1 Sanitizer:...
OSV-2023-505 UNKNOWN WRITE in regcomp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60010 Crash type: UNKNOWN WRITE Crash state: regcomp fileregcomp load1...
PT-2023-35878
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN WRITE. The crash state includes functions such as regcomp, file regcomp, and load 1. No information is...
file:magic_fuzzer_loaddb: Crash in regcomp
Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=6499330727739392 Project: file Fuzzing Engine: libFuzzer Fuzz Target: magicfuzzerloaddb Job Type: libfuzzerasani386file Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x5caf57f0 Crash State:...
SUSE CVE-2010-4052
Stack consumption vulnerability in the regcomp implementation in the GNU C Library aka glibc or libc6 through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service resource exhaustion via a regular expression containing adjacent repetition operators, a...
SUSE CVE-2010-4051
The regcomp implementation in the GNU C Library aka glibc or libc6 through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service application crash via a regular expression containing adjacent bounded repetitions that bypass the intended REDUPMAX...
SUSE CVE-2015-2305
Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library aka rxspencer alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a...
SUSE CVE-2017-12837
Heap-based buffer overflow in the Sregatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service out-of-bounds write via a regular expression with a '\N' escape and the case-insensitive modifier...
SUSE CVE-2019-16163
Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c...
SUSE CVE-2020-12723
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive Sstudychunk calls...
OSV-2022-952 UNKNOWN WRITE in regcomp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51778 Crash type: UNKNOWN WRITE Crash state: regcomp fileregcomp load1...
file:magic_fuzzer_loaddb: Crash in regcomp
Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=6253395577274368 Project: file Fuzzing Engine: libFuzzer Fuzz Target: magicfuzzerloaddb Job Type: libfuzzerasani386file Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x667377f0 Crash State:...
PT-2022-4707
Name of the Vulnerable Software and Affected Versions vim versions prior to 9.0.0404 Description The issue is related to a NULL Pointer Dereference in the vim regcomp function of the Vim text editor. This could allow an attacker to impact the confidentiality, integrity, and availability of...
Null Dereference in vim_regcomp()
Description: Null Dereference in vimregcomp at vim/src/regexp.c:2716 Vim Version: git log commit 8f7116caddc6f0725cf1211407d97645c4eb7b65 HEAD - master, origin/master, origin/HEAD Proof of Concept: $ git clone https://github.com/vim/vim.git $ cd vim/ && ./configure && make && cd src/ $ echo "call...
PT-2022-37001
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type known as Memcpy-param-overlap. The crash state involves several functions, including repeat, p ere, and cli regcomp...