Fedora Update for tre FEDORA-2016-cd09eab674

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2016-0395 Updated tre packages fix security vulnerability

The TRE library allows context-dependent attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted regular expression CVE-2015-3796. A vulnerability has been found in the tre package that could allow an attacker to perform controlled he...

Updated tre packages fix security vulnerability

The TRE library allows context-dependent attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted regular expression CVE-2015-3796. A vulnerability has been found in the tre package that could allow an attacker to perform controlled he...

Fedora 25 : tre (2016-0a952a3bc0)

This update includes the following fixes : - fix for CVE-2016-8859 - fix for CVE-2015-3796 see https://github.com/laurikari/tre/issues/37 and https://bugs.chromium.org/p/project-zero/issues/detail?i d=428 - fix for parallel installation of multilib packages Note that Tenable Network Security has...

PT-2017-9847 · None +3 · Musl Libc +4

Name of the Vulnerable Software and Affected Versions: TRE library versions affected versions not specified musl libc versions affected versions not specified Description: The issue is related to multiple integer overflows in the TRE library and musl libc, which can be exploited by attackers to...

[SECURITY] Fedora 25 Update: tre-0.8.0-18.20140228gitc2f5d13.fc25

TRE is a lightweight, robust, and efficient POSIX compatible regexp matching library with some exciting features such as approximate matching...

[SECURITY] Fedora 23 Update: tre-0.8.0-18.20140228gitc2f5d13.fc23

TRE is a lightweight, robust, and efficient POSIX compatible regexp matching library with some exciting features such as approximate matching...

Debian DLA-687-1 : tre security update

A vulnerability has been found in the tre package that could allow an attacker to perform controlled heap corruption. For Debian 7 'Wheezy', these problems have been fixed in version 0.8.0-3+deb7u1. We recommend that you upgrade your tre packages. NOTE: Tenable Network Security has extracted the...

[SECURITY] [DLA 687-1] tre security update

Package : tre Version : 0.8.0-3+deb7u1 CVE ID : CVE-2016-8859 Debian Bug : 842169 A vulnerability has been found in the tre package that could allow an attacker to perform controlled heap corruption. For Debian 7 "Wheezy", these problems have been fixed in version 0.8.0-3+deb7u1. We recommend tha...

OS X Regex Engine (TRE) - Stack Buffer Overflow Vulnerability

Exploit for macOS platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=428 OS X Libc uses the slightly obscure TRE regex engine http://laurikari.net/tre/ If used in enhanced mode by passing the REGENHANCED flag to regcomp TRE supports...

OS X Regex Engine (TRE) - Integer Signedness and Overflow Issues Vulnerability

Exploit for macOS platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=429 The OS X regex engine function tretnfarunparallel contains the following code: int tbytes; ... if !matchtags numtags = 0; else numtags = tnfa-numtags; ... int rbytes,...

Apple Mac OSX Regex Engine (TRE) - Stack Buffer Overflow (PoC)

Source: https://code.google.com/p/google-security-research/issues/detail?id=428 OS X Libc uses the slightly obscure TRE regex engine http://laurikari.net/tre/ If used in enhanced mode by passing the REGENHANCED flag to regcomp TRE supports arbitrary-width hex literals. Here is the code used to...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code or cause system failures

The vulnerability of the TRE library in Libc-based iOS and Mac OS X operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause system failures remotely...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code or cause system failures

The vulnerability of the TRE library in Libc-based iOS and Mac OS X operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause system failures remotely...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code or cause system failures

The vulnerability of the TRE library in Libc-based iOS and Mac OS X operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause system failures remotely...

Apple iOS Libc TRE library memory corruption vulnerability (CNVD-2015-05565)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the Apple iOS Libc TRE, which allows an attacker to exploit the vulnerability to cause an application to process special rule expressions to execute arbitrary...

Apple iOS Libc TRE library memory corruption vulnerability (CNVD-2015-05567)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the Apple iOS Libc TRE, which allows an attacker to exploit the vulnerability to cause an application to process special rule expressions to execute arbitrary...

Apple iOS Libc TRE Library Memory Corruption Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the Apple iOS Libc TRE, which allows an attacker to exploit the vulnerability to cause an application to process special rule expressions to execute arbitrary...

CVE-2015-3798

The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted regular expression, a different vulnerability than CVE-2015-3796 and...

CVE-2015-3797

The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted regular expression, a different vulnerability than CVE-2015-3796 and...