REDHAT-BUG-383361: Integer Overflow
First published: Wed Nov 14 2007(Updated: )
<a href="https://access.redhat.com/security/cve/CVE-2006-7224">CVE-2006-7224</a> initially described several integer overflows in pcre, all described here: <a href="http://scary.beasts.org/security/CESA-2007-006.html">http://scary.beasts.org/security/CESA-2007-006.html</a> This id should be used to describe issue #2 in that advisory: 2) Uncharacterized crash researching item #1 above: Demo: (?P<0>)(?P<1>)...fill in this sequence...(?P<3999>) This does not trigger the integer overflow present in #1 above, but still crashes with a serious-looking memory error of some kind - possibly a buffer overflow.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PCRE |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-383361?
The vulnerability REDHAT-BUG-383361 is classified as critical due to its potential for integer overflow leading to security risks.
How do I fix REDHAT-BUG-383361?
To address the vulnerability REDHAT-BUG-383361, update PCRE to the latest version provided by your vendor.
What systems are affected by REDHAT-BUG-383361?
The vulnerability REDHAT-BUG-383361 affects systems running PCRE with the specific versions vulnerable to integer overflow.
What are the potential consequences of REDHAT-BUG-383361?
Exploiting vulnerability REDHAT-BUG-383361 could allow an attacker to execute arbitrary code on the affected system.
Is there a known exploit for REDHAT-BUG-383361?
While specific exploits for REDHAT-BUG-383361 may not be publicly documented, the nature of integer overflow vulnerabilities often leads to exploit development.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2005-4872
- agent/source
- agent/weakness
- agent/severity
- agent/description
- agent/event
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- vendor/pcre
- canonical/pcre