Red Hat Security AdvisoryRHSA-2007:1065
pcre security update
Released 2007-11-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 pcre-3.4-2.4, pcre-3.4-2.4.i386, pcre-3.4-2.4.ia64 +2
- Red Hat Enterprise Linux ES version 2.1 pcre-3.4-2.4, pcre-3.4-2.4.i386, pcre-devel-3.4-2.4.i386
- Red Hat Enterprise Linux WS version 2.1 pcre-3.4-2.4, pcre-3.4-2.4.i386, pcre-devel-3.4-2.4.i386
- Red Hat Linux Advanced Workstation 2.1 pcre-3.4-2.4, pcre-3.4-2.4.ia64, pcre-devel-3.4-2.4.ia64
Fixes 2 records
Priority LOW 37
Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04077 · Published 2007-11-07 · Fixed CWE-119
Priority LOW 36
Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow context-dependent attackers to execute arbitrary code via a regular expression that involves large (1) min, (2) max, or (3) dup…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03661 · Published 2007-11-14 · Fixed CWE-189
