Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40     allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other     impact via a crafted file. (CVE-2017-7245)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a
    denial of service (invalid memory read) via a crafted file. (CVE-2017-7244)

  - Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40
    allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other
    impact via a crafted file. (CVE-2017-7245)

  - Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40
    allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified
    other impact via a crafted file. (CVE-2017-7246)

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3652-1 advisory.

    Update pcre to version 8.45:

    - CVE-2020-14155: Fixed integer overflow via a large number after a '(?C' substring (bsc#1172974).
    - CVE-2019-20838: Fixed buffer over-read in JIT compiler (bsc#1172973).
    - CVE-2017-7244: Fixed invalid read in _pcre32_xclass() (bsc#1030807).
    - CVE-2017-7245: Fixed buffer overflow in the pcre32_copy_substring (bsc#1030805).
    - CVE-2017-7246: Fixed another buffer overflow in the pcre32_copy_substring (bsc#1030803).
    - CVE-2017-7186: Fixed denial of service caused by an invalid Unicode property lookup (bsc#1030066).
    - CVE-2017-6004: Fixed denial of service via crafted regular expression (bsc#1025709).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the pcre packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - pcregrep in PCRE before 8.38 mishandles the -q option     for binary files, which might allow remote attackers to     obtain sensitive information via a crafted file, as     demonstrated by a CGI script that sends stdout data to     a client.(CVE-2015-8393)

  - Stack-based buffer overflow in the     pcre32_copy_substring function in pcre_get.c in     libpcre1 in PCRE 8.40 allows remote attackers to cause     a denial of service (WRITE of size 4) or possibly have     unspecified other impact via a crafted     file.(CVE-2017-7245)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201710-25 (PCRE: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in The PCRE Library.
      Please review the references below for details.
  Impact :

    A remote attacker could possibly cause a Denial of Service condition or       other unspecified impacts via a specially crafted file.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
221406	Linux Distros Unpatched Vulnerability : CVE-2017-7245	Nessus	Misc.	high
406224	Alpine: pcre: security update to 8.41-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
406224	Alpine: pcre: security update to 8.41-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
155134	SUSE SLED12: libpcre1 / libpcre1-32bit / libpcre16-0 / libpcrecpp0 / etc (SUSE-SU-2021:3652-1)	Nessus	SuSE Local Security Checks	high
132181	EulerOS 2.0 SP3 : pcre (EulerOS-SA-2019-2646)	Nessus	Huawei Local Security Checks	high
104068	GLSA-201710-25 : PCRE: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2017-7245

high

Tenable Plugins

high

high

high

high

high

high