NVD

Id
65773  
Name
CVE-2006-7230  
Description
Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate the amount of memory needed for a compiled regular expression pattern when the (1) -x or (2) -i UTF-8 options change within the pattern, which allows context-dependent attackers to cause a denial of service (PCRE or glibc crash) via crafted regular expressions.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2007-11-15  
Modified Date
2010-08-21  
Seq
2006-7230  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
342492 65773 CVE-2006-7230 http://bugs.gentoo.org/show_bug.cgi?id=198976  View
342493 65773 CVE-2006-7230 SUSE-SA:2008:004  View
342494 65773 CVE-2006-7230 oval:org.mitre.oval:def:10911  View
342495 65773 CVE-2006-7230 GLSA-200711-30  View
342496 65773 CVE-2006-7230 GLSA-200801-02  View
342497 65773 CVE-2006-7230 GLSA-200801-18  View
342498 65773 CVE-2006-7230 GLSA-200801-19  View
342499 65773 CVE-2006-7230 GLSA-200805-11  View
342500 65773 CVE-2006-7230 http://support.avaya.com/elmodocs2/security/ASA-2007-505.htm  View
342501 65773 CVE-2006-7230 DSA-1570  View
342502 65773 CVE-2006-7230 MDVSA-2008:030  View
342503 65773 CVE-2006-7230 SUSE-SA:2007:062  View
342504 65773 CVE-2006-7230 http://www.pcre.org/changelog.txt  View
342505 65773 CVE-2006-7230 RHSA-2007:1059  View
342506 65773 CVE-2006-7230 RHSA-2007:1068  View
342507 65773 CVE-2006-7230 26550  View
342508 65773 CVE-2006-7230 https://bugzilla.redhat.com/show_bug.cgi?id=384801  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52313 JVNDB-2007-001003 PCRE における正規表現中の UTF-8 オプションによるサービス運用妨害 (DoS) の脆弱性 Perl-Compatible Regular Expression (PCRE) ライブラリには、正規表現パターン中に -x もしくは -i の UTF-8 オプションが含まれている場合、必要なメモリ領域を適切に計算しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2006-7230 23332 CVE-2006-7230 65773 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001003.html 2007-11-15 2008-01-11 View