Записи PCRE
64 опубликованных записей вендора pcre.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 12
- С записью об исправлении
- 98,4 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer30
- CWE-125 Out-of-bounds Read10
- CWE-190 Integer Overflow or Wraparound6
- CWE-189 Numeric Errors4
- CWE-787 Out-of-bounds Write2
- CWE-590 Free of Memory not on the Heap1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
64 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
42В плане | CVE-2015-3210Эксплойта нет | Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regularpcre · pcre2 · CWE-787 | Критическая9,8 | — | 9,1 % | 13 дек. 2016 г. |
42В плане | CVE-2016-3191Эксплойта нет | The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containipcre · pcre · CWE-119 | Критическая9,8 | — | 8,4 % | 17 мар. 2016 г. |
41В плане | CVE-2016-1283Эксплойта нет | The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?Jpcre · pcre · CWE-119 | Критическая9,8 | — | 7,7 % | 2 янв. 2016 г. |
41В плане | CVE-2015-8386Эксплойта нет | PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to capcre · perl compatible regular expression library · CWE-119 | Критическая9,8 | — | 6,8 % | 1 дек. 2015 г. |
41В плане | CVE-2015-8391Эксплойта нет | The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denipcre · pcre · CWE-119 | Критическая9,8 | — | 6,4 % | 1 дек. 2015 г. |
41В плане | CVE-2015-8383Эксплойта нет | PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflowpcre · perl compatible regular expression library · CWE-119 | Критическая9,8 | — | 6,0 % | 1 дек. 2015 г. |
40В плане | CVE-2015-8394Эксплойта нет | PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote attackers to cause a denial of service (integpcre · perl compatible regular expression library · CWE-190 | Критическая9,8 | — | 4,8 % | 1 дек. 2015 г. |
40В плане | CVE-2015-8390Эксплойта нет | PCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote attackers to cause a denial of service (uninipcre · perl compatible regular expression library · CWE-908 | Критическая9,8 | — | 4,6 % | 1 дек. 2015 г. |
40В плане | CVE-2017-8786Эксплойта нет | pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified otpcre · pcre2 · CWE-119 | Критическая9,8 | — | 4,0 % | 4 мая 2017 г. |
40В плане | CVE-2015-8389Эксплойта нет | PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a denial of service (inpcre · perl compatible regular expression library · CWE-119 | Критическая9,8 | — | 3,8 % | 1 дек. 2015 г. |
40В плане | CVE-2017-8399Эксплойта нет | PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a "pattern with very manypcre · pcre2 · CWE-119 | Критическая9,8 | — | 3,1 % | 1 мая 2017 г. |
38Наблюдать | CVE-2015-5073Эксплойта нет | Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial pcre · pcre · CWE-119 | Критическая9,1 | — | 7,6 % | 13 дек. 2016 г. |
37Наблюдать | CVE-2022-1586Эксплойта нет | An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compipcre · pcre2 · CWE-125 | Критическая9,1 | — | 3,3 % | 16 мая 2022 г. |
37Наблюдать | CVE-2022-1587Эксплойта нет | An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.cpcre · pcre2 · CWE-125 | Критическая9,1 | — | 2,7 % | 16 мая 2022 г. |
32Наблюдать | CVE-2008-2371Эксплойта нет | Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackerspcre · pcre · CWE-787 | Высокая7,5 | — | 6,7 % | 7 июл. 2008 г. |
32Наблюдать | CVE-2015-8388Эксплойта нет | PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows pcre · perl compatible regular expression library · CWE-119 | Высокая7,5 | — | 6,5 % | 1 дек. 2015 г. |
32Наблюдать | CVE-2015-3217Эксплойта нет | PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of servipcre · pcre2 · CWE-119 | Высокая7,5 | — | 6,1 % | 13 дек. 2016 г. |
32Наблюдать | CVE-2008-0674Эксплойта нет | Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class wpcre · pcre · CWE-119 | Высокая7,5 | — | 5,9 % | 18 февр. 2008 г. |
32Наблюдать | CVE-2015-8385Эксплойта нет | PCRE before 8.38 mishandles the /(?|(\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, which allows remote attpcre · perl compatible regular expression library · CWE-119 | Высокая7,5 | — | 5,6 % | 1 дек. 2015 г. |
32Наблюдать | CVE-2015-8381Эксплойта нет | The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles the /(?J:(?|(:(?|(?'R'pcre · perl compatible regular expression library · CWE-119 | Высокая7,5 | — | 5,2 % | 1 дек. 2015 г. |
32Наблюдать | CVE-2015-2328Эксплойта нет | PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to causpcre · pcre · CWE-19 | Высокая7,5 | — | 5,2 % | 1 дек. 2015 г. |
32Наблюдать | CVE-2017-7186Эксплойта нет | libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read accespcre · pcre · CWE-119 | Высокая7,5 | — | 5,0 % | 19 мар. 2017 г. |
32Наблюдать | CVE-2017-7246Эксплойта нет | Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a pcre · pcre · CWE-119 | Высокая7,8 | — | 2,5 % | 23 мар. 2017 г. |
32Наблюдать | CVE-2017-7245Эксплойта нет | Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a pcre · pcre · CWE-119 | Высокая7,8 | — | 2,3 % | 23 мар. 2017 г. |
31Наблюдать | CVE-2017-6004Эксплойта нет | The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled versiopcre · pcre · CWE-125 | Высокая7,5 | — | 4,5 % | 16 февр. 2017 г. |
- CVE-2015-321042В плане
Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular
КритическаяCVSS 9,8Эксплойта нетEPSS 9 %pcre · pcre213 дек. 2016 г.
- CVE-2016-319142В плане
The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containi
КритическаяCVSS 9,8Эксплойта нетEPSS 8 %pcre · pcre17 мар. 2016 г.
- CVE-2016-128341В плане
The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J
КритическаяCVSS 9,8Эксплойта нетEPSS 7 %pcre · pcre2 янв. 2016 г.
- CVE-2015-838641В плане
PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to ca
КритическаяCVSS 9,8Эксплойта нетEPSS 6 %pcre · perl compatible regular expression library1 дек. 2015 г.
- CVE-2015-839141В плане
The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a deni
КритическаяCVSS 9,8Эксплойта нетEPSS 6 %pcre · pcre1 дек. 2015 г.
- CVE-2015-838341В плане
PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow
КритическаяCVSS 9,8Эксплойта нетEPSS 6 %pcre · perl compatible regular expression library1 дек. 2015 г.
- CVE-2015-839440В плане
PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote attackers to cause a denial of service (integ
КритическаяCVSS 9,8Эксплойта нетEPSS 4 %pcre · perl compatible regular expression library1 дек. 2015 г.
- CVE-2015-839040В плане
PCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote attackers to cause a denial of service (unini
КритическаяCVSS 9,8Эксплойта нетEPSS 4 %pcre · perl compatible regular expression library1 дек. 2015 г.
- CVE-2017-878640В плане
pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified ot
КритическаяCVSS 9,8Эксплойта нетEPSS 4 %pcre · pcre24 мая 2017 г.
- CVE-2015-838940В плане
PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a denial of service (in
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %pcre · perl compatible regular expression library1 дек. 2015 г.
- CVE-2017-839940В плане
PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a "pattern with very many
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %pcre · pcre21 мая 2017 г.
- CVE-2015-507338Наблюдать
Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial
КритическаяCVSS 9,1Эксплойта нетEPSS 7 %pcre · pcre13 дек. 2016 г.
- CVE-2022-158637Наблюдать
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compi
КритическаяCVSS 9,1Эксплойта нетEPSS 3 %pcre · pcre216 мая 2022 г.
- CVE-2022-158737Наблюдать
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c
КритическаяCVSS 9,1Эксплойта нетEPSS 2 %pcre · pcre216 мая 2022 г.
- CVE-2008-237132Наблюдать
Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers
ВысокаяCVSS 7,5Эксплойта нетEPSS 6 %pcre · pcre7 июл. 2008 г.
- CVE-2015-838832Наблюдать
PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows
ВысокаяCVSS 7,5Эксплойта нетEPSS 6 %pcre · perl compatible regular expression library1 дек. 2015 г.
- CVE-2015-321732Наблюдать
PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of servi
ВысокаяCVSS 7,5Эксплойта нетEPSS 6 %pcre · pcre213 дек. 2016 г.
- CVE-2008-067432Наблюдать
Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class w
ВысокаяCVSS 7,5Эксплойта нетEPSS 5 %pcre · pcre18 февр. 2008 г.
- CVE-2015-838532Наблюдать
PCRE before 8.38 mishandles the /(?|(\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, which allows remote att
ВысокаяCVSS 7,5Эксплойта нетEPSS 5 %pcre · perl compatible regular expression library1 дек. 2015 г.
- CVE-2015-838132Наблюдать
The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles the /(?J:(?|(:(?|(?'R'
ВысокаяCVSS 7,5Эксплойта нетEPSS 5 %pcre · perl compatible regular expression library1 дек. 2015 г.
- CVE-2015-232832Наблюдать
PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to caus
ВысокаяCVSS 7,5Эксплойта нетEPSS 5 %pcre · pcre1 дек. 2015 г.
- CVE-2017-718632Наблюдать
libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read acces
ВысокаяCVSS 7,5Эксплойта нетEPSS 5 %pcre · pcre19 мар. 2017 г.
- CVE-2017-724632Наблюдать
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a
ВысокаяCVSS 7,8Эксплойта нетEPSS 2 %pcre · pcre23 мар. 2017 г.
- CVE-2017-724532Наблюдать
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a
ВысокаяCVSS 7,8Эксплойта нетEPSS 2 %pcre · pcre23 мар. 2017 г.
- CVE-2017-600431Наблюдать
The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled versio
ВысокаяCVSS 7,5Эксплойта нетEPSS 4 %pcre · pcre16 февр. 2017 г.