REDHAT-BUG-383371: Integer Overflow
First published: Wed Nov 14 2007(Updated: )
<a href="https://access.redhat.com/security/cve/CVE-2006-7224">CVE-2006-7224</a> initially described several integer overflows in pcre, all described here: <a href="http://scary.beasts.org/security/CESA-2007-006.html">http://scary.beasts.org/security/CESA-2007-006.html</a> This id should be used to describe issue #2 in that advisory: 3) More possible integer overflow trouble. pcre_compile: --- if (min == 0) { length++; if (max > 0) length += (max - 1) * (duplength + 3 + 2*LINK_SIZE); } ... else { length += (min - 1) * duplength; if (max > min) /* Need this test as max=-1 means no limit */ length += (max - min) * (duplength + 3 + 2*LINK_SIZE) - (2 + 2*LINK_SIZE); } --- In both these cases, I see no reason why a malicious regexp pattern couldn't cause an integer overflow by using large min / max / duplength values. This will really mess up the critical "length" value.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PCRE |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2006-7224
- http://scary.beasts.org/security/CESA-2007-006.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=383371#c11
- http://rhn.redhat.com/errata/RHSA-2007-1059.html
- http://rhn.redhat.com/errata/RHSA-2007-1063.html
- http://rhn.redhat.com/errata/RHSA-2007-1065.html
- http://rhn.redhat.com/errata/RHSA-2007-1068.html
- http://rhn.redhat.com/errata/RHSA-2007-1077.html
- http://rhn.redhat.com/errata/RHSA-2007-1076.html
- https://bugzilla.redhat.com/show_bug.cgi?id=383371
Frequently Asked Questions
What is the severity of REDHAT-BUG-383371?
The severity of REDHAT-BUG-383371 is classified as high due to the presence of integer overflows in the pcre library.
How do I fix REDHAT-BUG-383371?
To fix REDHAT-BUG-383371, update the pcre library to the latest patched version provided by your distribution.
What software is affected by REDHAT-BUG-383371?
REDHAT-BUG-383371 affects the PCRE library, specifically its older versions prior to the security patches.
Is REDHAT-BUG-383371 related to any known exploits?
Yes, REDHAT-BUG-383371 is linked to potential exploits that can arise from the integer overflow vulnerabilities in the pcre library.
What version of pcre is vulnerable in REDHAT-BUG-383371?
Any version of pcre prior to the security updates that address CVE-2006-7224 is considered vulnerable in REDHAT-BUG-383371.
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2006-7228
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- vendor/pcre
- canonical/pcre