ALT-PU-2018-2007-1
Closed vulnerabilities
Published: 2017-07-11
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-11164
In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression.
Severity: HIGH (7.5)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- http://openwall.com/lists/oss-security/2017/07/11/3
- http://openwall.com/lists/oss-security/2017/07/11/3
- [oss-security] 20230411 CVE-2017-11164 - stack exhaustion in PCRE
- [oss-security] 20230411 CVE-2017-11164 - stack exhaustion in PCRE
- [oss-security] 20230412 Re: CVE-2017-11164 - stack exhaustion in PCRE
- [oss-security] 20230412 Re: CVE-2017-11164 - stack exhaustion in PCRE
- 99575
- 99575
- [mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar
- [mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar
Published: 2019-03-21
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-16231
In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report, noting that there are options that can be used to limit the amount of stack that is used
Severity: MEDIUM (5.5)
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References:
- http://packetstormsecurity.com/files/150897/PCRE-8.41-Buffer-Overflow.html
- http://packetstormsecurity.com/files/150897/PCRE-8.41-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2018/Dec/33
- http://seclists.org/fulldisclosure/2018/Dec/33
- http://www.openwall.com/lists/oss-security/2017/11/01/11
- http://www.openwall.com/lists/oss-security/2017/11/01/11
- http://www.openwall.com/lists/oss-security/2017/11/01/3
- http://www.openwall.com/lists/oss-security/2017/11/01/3
- http://www.openwall.com/lists/oss-security/2017/11/01/7
- http://www.openwall.com/lists/oss-security/2017/11/01/7
- http://www.openwall.com/lists/oss-security/2017/11/01/8
- http://www.openwall.com/lists/oss-security/2017/11/01/8
- http://www.securityfocus.com/bid/101688
- http://www.securityfocus.com/bid/101688
- https://bugs.exim.org/show_bug.cgi?id=2047
- https://bugs.exim.org/show_bug.cgi?id=2047