NVD

Id
36354  
Name
CVE-2014-9769  
Description
pcre_jit_compile.c in PCRE 8.35 does not properly use table jumps to optimize nested alternatives, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a crafted string, as demonstrated by packets encountered by Suricata during use of a regular expression in an Emerging Threats Open ruleset.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-03-28  
Modified Date
2016-12-02  
Seq
2014-9769  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
185986 36354 CVE-2014-9769 http://vcs.pcre.org/pcre?view=revision&revision=1475  View
185987 36354 CVE-2014-9769 [oss-security] 20160326 CVE Request: pcre: Segmentation fault on certain input to regular expressions with nested alternatives when JIT is used  View
185988 36354 CVE-2014-9769 85570  View
185989 36354 CVE-2014-9769 1035424  View
185990 36354 CVE-2014-9769 https://bugs.debian.org/819050  View
185991 36354 CVE-2014-9769 https://redmine.openinfosecfoundation.org/issues/1693  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19278 JVNDB-2014-008156 PCRE の pcre_jit_compile.c におけるサービス運用妨害 (DoS) の脆弱性 PCRE の pcre_jit_compile.c は、テーブルジャンプを適切に使用せずにネストされたオルタナティブを最適化するため、サービス運用妨害 (スタックメモリ破損) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2014-9769 77062 CVE-2014-9769 36354 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-008156.html 2014-04-25 2016-03-29 View