In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report, noting that there are options that can be used to limit the amount of stack that is used

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match()
    in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report,
    noting that there are options that can be used to limit the amount of stack that is used (CVE-2017-16231)

  - LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service
    (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were
    unable to reproduce the issue (CVE-2017-16232)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion
    (uncontrolled recursion) when processing a crafted regular expression. (CVE-2017-11164)

  - In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match()
    in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report,
    noting that there are options that can be used to limit the amount of stack that is used (CVE-2017-16231)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match()     in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report,     noting that there are options that can be used to limit the amount of stack that is used (CVE-2017-16231)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
424604	Alpine: libtiffxx, multiple tiff packages: security update to 4.0.9-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
424604	Alpine: libtiffxx, multiple tiff packages: security update to 4.0.9-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
424331	Alpine: multiple libpcre16 packages, multiple pcre packages: security update to 7.8-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
424331	Alpine: multiple libpcre16 packages, multiple pcre packages: security update to 7.8-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
220914	Linux Distros Unpatched Vulnerability : CVE-2017-16231	Nessus	Misc.	medium
400790	Alpine: libtiffxx, multiple tiff packages: security update to 4.0.8-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
400790	Alpine: libtiffxx, multiple tiff packages: security update to 4.0.8-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2017-16231

medium

Tenable Plugins

high

high

high

high

medium

high

high