CVE-2019-19203

CVE-2019-19203 È stato scoperto un problema in Oniguruma 6.x prima della 6.9.4rc2. Nella funzione gb18030mbcenclen nel file gb18030.c, un puntatore UChar viene dereferenziato senza verificare se ha superato la fine della stringa confrontata. Ciò porta a una sovralettura del buffer basata su heap...

CVE-2019-19204

CVE-2019-19204 È stato scoperto un problema in Oniguruma 6.x precedente alla 6.9.4rc2. Nella funzione fetchintervalquantifier precedentemente nota come fetchrangequantifier in regparse.c, PFETCH viene chiamata senza controllare PEND. Ciò porta a una lettura oltre i limiti di un buffer basato su...

CVE-2026-35458 Gotenberg has a ReDoS via extraHttpHeaders scope feature

Gotenberg is an API for converting document formats. In 8.29.1 and earlier, Gotenberg uses dlclark/regexp2 to compile user-supplied scope patterns without setting a proper timeout. Users with access to features using this logic can hang workers indefinitely...

MiracleLinux 7 : pcre-8.32-15.el7.1 (AXSA:2016-391:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-391:01 advisory. Perl-compatible regular expression library. PCRE has its own native API, but a set of wrapper functions that are based on the POSIX API are also...

[SECURITY] Fedora 43 Update: rust-regex-1.12.2-1.fc43

An implementation of regular expressions for Rust. This implementation uses finite automata and guarantees linear time matching on all inputs...

DEBIAN-CVE-2025-58050

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the scs:... Scan SubString verb when combined with...

The vulnerability of the libpcre component in the Regular Expression library PCRE allows a attacker to cause a service failure.

The vulnerability of the libpcre component in the Regular Expression library PCRE is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...

SUSE CVE-2005-4872

Perl-Compatible Regular Expression PCRE library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a denial of service crash via a regular expression with a large number of named subpatterns, which triggers a buffer...

SUSE CVE-2017-8399

PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2match.c, related to a "pattern with very many captures."...

USN-5627-2: PCRE vulnerabilities

USN-5627-1 fixed several vulnerabilities in PCRE. This update provides the corresponding fixes for Ubuntu 18.04 ESM. Original advisory details: It was discovered that PCRE incorrectly handled memory when handling certain regular expressions. An attacker could possibly use this issue to cause...

GHSA-V4RH-8P82-6H5W Regular expression denial of service in url-regex

all versions of url-regex are vulnerable to Regular Expression Denial of Service. An attacker providing a very long string in String.test can cause a Denial of Service...

OPENSUSE-SU-2018:0359-1 Security update for chromium

This update for chromium to version 64.0.3282.140 fixes the following security issues: - CVE-2018-6406: Various asan fixes boo1078463, boo1079021 The regular expression library re2 was updated to 2018-02-01...

OPENSUSE-SU-2018:0360-1 Security update for chromium

This update for chromium to version 64.0.3282.140 fixes the following security issues: - CVE-2018-6406: Various asan fixes boo1078463, boo1079021 The regular expression library re2 was updated to 2018-02-01...

PCRE2 Buffer Overflow Vulnerability (CNVD-2017-06216)

PCRE2 is an API for modifying PCRE Open Source Regular Expression Library developed by software developer Philip Hazel. A heap buffer overflow vulnerability exists in the pcre2test.c file in PCRE2 version 10.23. A remote attacker could exploit this vulnerability to cause a denial of service with...

PCRE2 Buffer Overflow Vulnerability (CNVD-2017-07003)

PCRE2 is an API for modifying PCRE Open Source Regular Expression Library developed by software developer Philip Hazel. A buffer overflow vulnerability exists in the pcre2match.c file in versions of PCRE2 prior to 2017-03-10. An attacker can exploit this vulnerability to cause a denial of service...

UBUNTU-CVE-2015-8395

PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and...

Moderate: Red Hat Bug Fix Advisory: pcre bug fix update

Updated pcre packages that fix several bugs are now available for Red Hat Enterprise Linux 7. PCRE is a Perl-compatible regular expression library. This update fixes the following bugs: Previously, non-matched groups within capturing groups up to a forced match were not being properly reset by...

[SECURITY] Fedora 22 Update: pcre-8.37-4.fc22

Perl-compatible regular expression library. PCRE has its own native API, but a set of "wrapper" functions that are base d on the POSIX API are also supplied in the library libpcreposix. Note that this just provides a POSIX calling interface to PCRE: the regular expressions themselves still follow...

[USN-2694-1] PCRE vulnerabilities

========================================================================== Ubuntu Security Notice USN-2694-1 July 29, 2015 pcre3 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...

PCRE Denial of Service Vulnerability (CNVD-2015-02117)

PCRE Perl Compatible Regular Expressions is a Perl library that includes a library of perl-compatible regular expressions. A denial of service vulnerability exists in PCRE 8.36 and earlier versions, which can be exploited by a remote attacker to cause stack exhaustion leading to a denial of servi...