Red Hat Security AdvisoryRHSA-2007:1063
pcre security update
Released 2007-11-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 pcre-3.9-10.4, pcre-3.9-10.4.i386, pcre-devel-3.9-10.4 +1
- Red Hat Enterprise Linux AS version 3 pcre-3.9-10.4, pcre-3.9-10.4.i386, pcre-3.9-10.4.ia64 +5
- Red Hat Enterprise Linux ES version 3 pcre-3.9-10.4, pcre-3.9-10.4.i386, pcre-3.9-10.4.ia64 +3
- Red Hat Enterprise Linux WS version 3 pcre-3.9-10.4, pcre-3.9-10.4.i386, pcre-3.9-10.4.ia64 +3
Fixes 2 records
Priority LOW 37
Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04077 · Published 2007-11-07 · Fixed CWE-119
Priority LOW 36
Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow context-dependent attackers to execute arbitrary code via a regular expression that involves large (1) min, (2) max, or (3) dup…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03661 · Published 2007-11-14 · Fixed CWE-189
