CVE-2018-20796

In the GNU C Library aka glibc or libc6 through 2.29, checkdstlimitscalcpos1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '\227|\1\1|t1|\\2537+' in grep...

SUSE SLED12 / SLES12 Security Update : perl (SUSE-SU-2018:1972-1)

This update for perl fixes the following issues: These security issue were fixed : - CVE-2018-6913: Fixed space calculation issues in pppack.c bsc1082216. - CVE-2018-6798: Fixed heap buffer overflow in regexec.c bsc1082233. - CVE-2018-6797: Fixed sharp-s regexp overflow bsc1082234. -...

CVE-2017-9729

Summary: CVE-2017-9729 affects uClibc 0.9.33.2. The vulnerability is a stack exhaustion (uncontrolled recursion) in the function check_dst_limits_calc_pos_1 within misc/regex/regexec.c when processing a crafted regular expression. Affected component: uClibc C library; the issue stems from the reg...

CVE-2015-8853

The 1 Sreghop3, 2 Sreghop4, and 3 Sreghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of service infinite loop via crafted utf-8 data, as demonstrated by "a\x80."...

Code injection

The 1 Sreghop3, 2 Sreghop4, and 3 Sreghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of service infinite loop via crafted utf-8 data, as demonstrated by "a\x80."...

CVE-2015-8853

Perl vulnerability CVE-2015-8853 affects Perl before 5.24.0. In regexec.c, the S_reghop3, S_reghop4, and S_reghopmaybe3 functions allow context-dependent attackers to cause a denial of service (infinite loop) with crafted UTF-8 input (e.g., "a\x80"), leading to CPU exhaustion. Affected component ...

CVE-2015-8853

The 1 Sreghop3, 2 Sreghop4, and 3 Sreghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of service infinite loop via crafted utf-8 data, as demonstrated by "a\x80."...