CVE-2006-7226: Double Free
From pcre changelog, version 6.7:
26. If a subpattern containing a named recursion or subroutine reference such as (?P>B) was quantified, for example (xxx(?P>B)){3}, the calculation of the space required for the compiled pattern went wrong and gave too small a value. Depending on the environment, this could lead to "Failed: internal error: code overflow at offset 49" or "glibc detected double free or corruption" errors.
Acknowledgements:
Red Hat would like to thank Ludwig Nussel for reporting this issue.
Other sources
Perl-Compatible Regular Expression (PCRE) library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers to cause a denial of service (error or crash).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-7226?
CVE-2006-7226 is classified as a moderate severity vulnerability that could lead to a denial of service.
How do I fix CVE-2006-7226?
Fix CVE-2006-7226 by upgrading to a later version of PCRE that addresses this issue.
What versions of software are affected by CVE-2006-7226?
CVE-2006-7226 affects Red Hat Enterprise Linux 4.0 across various editions including Desktop, AS, ES, and WS.
What type of vulnerability is CVE-2006-7226?
CVE-2006-7226 is a vulnerability related to improper space calculation for compiled patterns in PCRE.
Is CVE-2006-7226 actively exploited?
There are no known active exploits specifically targeting CVE-2006-7226.