CVE-2006-7230
Fixed in a distro release EPSS 2%
Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate the amount of memory needed for a compiled regular expression pattern when the (1) -x or (2) -i UTF-8 options change within the pattern, which allows context-dependent attackers to cause a denial of service (PCRE or glibc crash) via crafted regular expressions.
Products: pcre
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pcre3 | 7.0-1 |
| Debian 4.0 | kazehakase | 0.4.2-1etch1 |
| Red Hat Enterprise Linux 4 | pcre | 0:4.5-4.el4_6.6 |
| Red Hat Enterprise Linux 4 | pcre-debuginfo | 0:4.5-4.el4_6.6 |
| Red Hat Enterprise Linux 4 | pcre-devel | 0:4.5-4.el4_6.6 |
| Red Hat Enterprise Linux 5 | pcre | 0:6.6-2.el5_1.7 |
| Red Hat Enterprise Linux 5 | pcre-debuginfo | 0:6.6-2.el5_1.7 |
| Red Hat Enterprise Linux 5 | pcre-devel | 0:6.6-2.el5_1.7 |