CVE

Id
77070  
CVE No.
CVE-2014-9769  
Status
Candidate  
Description
pcre_jit_compile.c in PCRE 8.35 does not properly use table jumps to optimize nested alternatives, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a crafted string, as demonstrated by packets encountered by Suricata during use of a regular expression in an Emerging Threats Open ruleset.  
Phase
Assigned (20160328)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
706993 77070 CVE-2014-9769 MLIST:[oss-security] 20160326 CVE Request: pcre: Segmentation fault on certain input to regular expressions with nested alternatives when JIT is used  View
706994 77070 CVE-2014-9769 URL:http://www.openwall.com/lists/oss-security/2016/03/26/1  View
706995 77070 CVE-2014-9769 CONFIRM:http://vcs.pcre.org/pcre?view=revision&revision=1475  View
706996 77070 CVE-2014-9769 CONFIRM:https://bugs.debian.org/819050  View
706997 77070 CVE-2014-9769 CONFIRM:https://redmine.openinfosecfoundation.org/issues/1693  View
706998 77070 CVE-2014-9769 BID:85570  View
706999 77070 CVE-2014-9769 URL:http://www.securityfocus.com/bid/85570  View
707000 77070 CVE-2014-9769 SECTRACK:1035424  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
2746 JVNDB-2016-003519 Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントにおける権限を取得される脆弱性 Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントの drivers/video/msm/vidc/common/dec/vdec.c 内の vid_dec_set_meta_buffers 関数は、バッファ数を検証しないため、権限を取得される脆弱性が存在します。 CVE-2014-9777 77070 9.3 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003519.html  View