pcre: heap buffer overflow in handling of duplicate named groups (8.39/14)
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
Configuration 4 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Software Collections for Red Hat Enterprise Linux 6 | |||
| rh-mariadb100-mariadb-1:10.0.25-4.el6 | cpe:/a:redhat:rhel_software_collections:2::el6 | RHSA-2016:1132 | 2016-05-26T00:00:00Z |
| Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS | |||
| rh-mariadb100-mariadb-1:10.0.25-4.el6 | cpe:/a:redhat:rhel_software_collections:2::el6 | RHSA-2016:1132 | 2016-05-26T00:00:00Z |
| Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUS | |||
| rh-mariadb100-mariadb-1:10.0.25-4.el6 | cpe:/a:redhat:rhel_software_collections:2::el6 | RHSA-2016:1132 | 2016-05-26T00:00:00Z |
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | |||
| rh-mariadb100-mariadb-1:10.0.25-4.el7 | cpe:/a:redhat:rhel_software_collections:2::el7 | RHSA-2016:1132 | 2016-05-26T00:00:00Z |
| Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUS | |||
| rh-mariadb100-mariadb-1:10.0.25-4.el7 | cpe:/a:redhat:rhel_software_collections:2::el7 | RHSA-2016:1132 | 2016-05-26T00:00:00Z |
| Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUS | |||
| rh-mariadb100-mariadb-1:10.0.25-4.el7 | cpe:/a:redhat:rhel_software_collections:2::el7 | RHSA-2016:1132 | 2016-05-26T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2016-2382 | The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. |
Ubuntu USN |
USN-2943-1 | PCRE vulnerabilities |
No CVSS v4.0
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 7.8% (7.791% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.