Red Hat Security AdvisoryRHSA-2015:0330
pcre security and enhancement update
Released 2015-03-05 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) pcre-8.32-14.el7
- Red Hat Enterprise Linux Client Optional (v. 7) pcre-devel-8.32-14.el7, pcre-static-8.32-14.el7, pcre-tools-8.32-14.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) pcre-8.32-14.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) pcre-devel-8.32-14.el7, pcre-static-8.32-14.el7, pcre-tools-8.32-14.el7
- Red Hat Enterprise Linux Server (v. 7) pcre-8.32-14.el7, pcre-8.32-14.el7.ppc, pcre-devel-8.32-14.el7 +1
- Red Hat Enterprise Linux Server Optional (v. 7) pcre-static-8.32-14.el7, pcre-static-8.32-14.el7.ppc, pcre-tools-8.32-14.el7
- Red Hat Enterprise Linux Workstation (v. 7) pcre-8.32-14.el7, pcre-devel-8.32-14.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) pcre-static-8.32-14.el7, pcre-tools-8.32-14.el7
Fixes 1 record
Priority LOW 32
Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.06505 · Published 2014-12-16 · Partial fix CWE-119