Red Hat Security AdvisoryRHSA-2007:1052
pcre security update
Released 2007-11-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) pcre-6.6-2.el5_1.1, pcre-6.6-2.el5_1.1.i386, pcre-6.6-2.el5_1.1.ia64 +5
- Red Hat Enterprise Linux AS version 4 pcre-4.5-4.el4_5.4, pcre-4.5-4.el4_5.4.i386, pcre-4.5-4.el4_5.4.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) pcre-6.6-2.el5_1.1, pcre-6.6-2.el5_1.1.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) pcre-6.6-2.el5_1.1, pcre-devel-6.6-2.el5_1.1, pcre-devel-6.6-2.el5_1.1.i386
- Red Hat Enterprise Linux Desktop version 4 pcre-4.5-4.el4_5.4, pcre-4.5-4.el4_5.4.i386, pcre-devel-4.5-4.el4_5.4 +1
- Red Hat Enterprise Linux ES version 4 pcre-4.5-4.el4_5.4, pcre-4.5-4.el4_5.4.i386, pcre-4.5-4.el4_5.4.ia64 +3
- Red Hat Enterprise Linux WS version 4 pcre-4.5-4.el4_5.4, pcre-4.5-4.el4_5.4.i386, pcre-4.5-4.el4_5.4.ia64 +3
Fixes 2 records
Priority LOW 36
Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to execute arbitrary code via a regular expression containing a large number of named subpatterns (name_…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03503 · Published 2007-11-14 · Fixed CWE-189
Priority LOW 25
Perl-Compatible Regular Expression (PCRE) library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a denial of service (crash) via a regular…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02321 · Published 2007-11-14 · Fixed CWE-119
