Perl-Compatible Regular Expression (PCRE) library prior to 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent malicious users to cause a denial of service (error or crash).
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
redhat enterprise linux desktop 4.0 |
||
redhat enterprise linux 4.0 |