Published: 16/12/2014 Updated: 04/08/2022

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 446

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Heap-based buffer overflow in PCRE 8.36 and previous versions allows remote malicious users to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats.

Vulnerable Product	Search on Vulmon	Subscribe to Product
pcre pcre
mariadb mariadb
fedoraproject fedora 20
fedoraproject fedora 21
fedoraproject fedora 19
opensuse opensuse 13.1
opensuse opensuse 13.2
oracle solaris 11.2
redhat enterprise linux desktop 7.0
redhat enterprise linux workstation 7.0
redhat enterprise linux server 7.0
redhat enterprise linux server tus 7.3
redhat enterprise linux server aus 7.3
redhat enterprise linux server aus 7.4
redhat enterprise linux eus 7.3
redhat enterprise linux eus 7.4
redhat enterprise linux eus 7.5
redhat enterprise linux eus 7.6
redhat enterprise linux eus 7.7
redhat enterprise linux server aus 7.7
redhat enterprise linux server aus 7.6
redhat enterprise linux server tus 7.6
redhat enterprise linux server tus 7.7

PCRE could be made to crash or run programs if it processed a specially-crafted regular expression ...

Debian Bug report logs - #770478 pcre3: CVE-2014-8964: heap buffer overflow Package: src:pcre3; Maintainer for src:pcre3 is Matthew Vernon <matthew@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 21 Nov 2014 15:39:07 UTC Severity: important Tags: patch, security, upstream Found in versi ...

A flaw was found in the way PCRE handled certain malformed regular expressions This issue could cause an application linked against PCRE to crash while parsing malicious regular expressions ...

A flaw was found in the way PCRE handled certain malformed regular expressions This issue could cause an application (for example, Konqueror) linked against PCRE to crash while parsing malicious regular expressions ...

CWE-119 http://www.openwall.com/lists/oss-security/2014/11/21/6 http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145843.html https://bugzilla.redhat.com/show_bug.cgi?id=1166147 http://bugs.exim.org/show_bug.cgi?id=1546 http://www.exim.org/viewvc/pcre?view=revision&revision=1513 http://rhn.redhat.com/errata/RHSA-2015-0330.html http://www.mandriva.com/security/advisories?name=MDVSA-2015:002 http://advisories.mageia.org/MGASA-2014-0534.html http://www.mandriva.com/security/advisories?name=MDVSA-2015:137 http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147516.html http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147474.html http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147511.html http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html http://www.securityfocus.com/bid/71206 https://security.gentoo.org/glsa/201607-02 https://usn.ubuntu.com/2694-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2014-8964

CVE-2014-8964

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect