CVE-2016-1283HIGH
Description
The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
References
http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178193.html
http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178955.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securityfocus.com/bid/79825
http://www.securitytracker.com/id/1034555
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.343110
https://access.redhat.com/errata/RHSA-2016:1132
https://bto.bluecoat.com/security-advisory/sa128
https://bugs.exim.org/show_bug.cgi?id=1767
https://security.gentoo.org/glsa/201607-02
Details
Source: MITRE
Published: 2016-01-03
Updated: 2018-01-05
Type: CWE-119
Risk Information
CVSS v2.0
Base Score: 7.5
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Impact Score: 6.4
Exploitability Score: 10
Severity: HIGH
CVSS v3.0
Base Score: 9.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 3.9
Severity: CRITICAL
Vulnerable Software
Configuration 1
OR
cpe:2.3:a:pcre:perl_compatible_regular_expression_library:8.38:*:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 98857 | PHP 7.1.x < 7.1.11 Multiple Vulnerabilities | Web Application Scanning | Component Vulnerability | high |
| 98845 | PHP 7.0.x < 7.0.25 Multiple Vulnerabilities | Web Application Scanning | Component Vulnerability | high |
| 98823 | PHP 5.6.x < 5.6.32 Multiple Vulnerabilities | Web Application Scanning | Component Vulnerability | high |
| 105865 | Fedora 27 : php (2017-46e8bdccef) | Nessus | Fedora Local Security Checks | high |
| 104706 | Amazon Linux AMI : php56 / php70,php71 (ALAS-2017-924) | Nessus | Amazon Linux Local Security Checks | high |
| 104640 | Tenable SecurityCenter PHP < 5.6.32 PCRE DoS | Nessus | Misc. | high |
| 104633 | PHP 7.1.x < 7.1.11 Multiple Vulnerabilities | Nessus | CGI abuses | high |
| 104632 | PHP 7.0.x < 7.0.25 Multiple Vulnerabilities | Nessus | CGI abuses | high |
| 104631 | PHP 5.6.x < 5.6.32 Multiple Vulnerabilities | Nessus | CGI abuses | high |
| 104451 | Fedora 25 : php (2017-cdaaf6ea12) | Nessus | Fedora Local Security Checks | high |
| 104443 | Fedora 26 : php (2017-0af85ae851) | Nessus | Fedora Local Security Checks | high |
| 104266 | FreeBSD : PHP -- denial of service attack (de7a2b32-bd7d-11e7-b627-d43d7e971a1b) | Nessus | FreeBSD Local Security Checks | high |
| 104215 | Slackware 14.0 / 14.1 / 14.2 / current : php (SSA:2017-300-01) | Nessus | Slackware Local Security Checks | high |
| 97893 | Tenable Log Correlation Engine (LCE) < 4.8.1 Multiple Vulnerabilities | Nessus | Misc. | critical |
| 95915 | SUSE SLED12 / SLES12 Security Update : pcre (SUSE-SU-2016:3161-1) | Nessus | SuSE Local Security Checks | high |
| 95754 | openSUSE Security Update : pcre (openSUSE-2016-1448) | Nessus | SuSE Local Security Checks | high |
| 95534 | SUSE SLED12 / SLES12 Security Update : pcre (SUSE-SU-2016:2971-1) | Nessus | SuSE Local Security Checks | high |
| 94906 | openSUSE Security Update : pcre (openSUSE-2016-1303) | Nessus | SuSE Local Security Checks | high |
| 91983 | GLSA-201607-02 : libpcre: Multiple Vulnerabilities | Nessus | Gentoo Local Security Checks | high |
| 91719 | Slackware 14.1 / current : pcre (SSA:2016-172-02) | Nessus | Slackware Local Security Checks | high |
| 90336 | FreeBSD : pcre -- heap overflow vulnerability (497b82e0-f9a0-11e5-92ce-002590263bf5) | Nessus | FreeBSD Local Security Checks | high |
| 90306 | Ubuntu 12.04 LTS / 14.04 LTS / 15.10 : pcre3 vulnerabilities (USN-2943-1) | Nessus | Ubuntu Local Security Checks | high |
| 89948 | Fedora 22 : pcre-8.38-3.fc22 (2016-f5af8e27ce) | Nessus | Fedora Local Security Checks | high |
| 89557 | Fedora 23 : pcre-8.38-6.fc23 (2016-65833b5dbc) | Nessus | Fedora Local Security Checks | high |