REDHAT-BUG-384761
First published: Thu Nov 15 2007(Updated: )
From pcre changelog, version 6.7: 18. A valid (though odd) pattern that looked like a POSIX character class but used an invalid character after [ (for example [[,abc,]]) caused pcre_compile() to give the error "Failed: internal error: code overflow" or in some cases to crash with a glibc free() error. This could even happen if the pattern terminated after [[ but there just happened to be a sequence of letters, a binary zero, and a closing ] in the memory that followed. Acknowledgements: Red Hat would like to thank Ludwig Nussel for reporting this issue.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PCRE |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=259901&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=259901&action=edit
- http://rhn.redhat.com/errata/RHSA-2007-1059.html
- http://rhn.redhat.com/errata/RHSA-2007-1068.html
- https://bugzilla.redhat.com/show_bug.cgi?id=384761
Frequently Asked Questions
What is the severity of REDHAT-BUG-384761?
The severity of REDHAT-BUG-384761 is considered high due to the potential crash of applications using the PCRE library.
How do I fix REDHAT-BUG-384761?
To fix REDHAT-BUG-384761, update your PCRE library to the latest version that addresses the internal error and crash.
What systems are affected by REDHAT-BUG-384761?
REDHAT-BUG-384761 affects systems using versions of the PCRE library prior to its patch for this vulnerability.
What is the cause of the issue in REDHAT-BUG-384761?
The issue in REDHAT-BUG-384761 is caused by invalid patterns in character classes leading to code overflow errors or crashes.
Is there any workaround for REDHAT-BUG-384761?
A possible workaround for REDHAT-BUG-384761 is to avoid using invalid character class patterns in your regular expressions.
- collector/redhat-bugzilla
- alias/CVE-2006-7225
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/pcre
- canonical/pcre