Red Hat Security AdvisoryRHSA-2007:0967
pcre security update
Released 2007-11-05 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) pcre-6.6-2.el5_0.1, pcre-6.6-2.el5_0.1.i386, pcre-6.6-2.el5_0.1.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) pcre-6.6-2.el5_0.1, pcre-6.6-2.el5_0.1.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) pcre-6.6-2.el5_0.1, pcre-devel-6.6-2.el5_0.1, pcre-devel-6.6-2.el5_0.1.i386
Fixes 2 records
Priority LOW 37
Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04077 · Published 2007-11-07 · Fixed CWE-119
Priority LOW 36
Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequ…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0353 · Published 2007-11-07 · Fixed CWE-119
