CVE-2008-2371

Published: Jul 7, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches.

Affected (11)

Products: Pcre: Pcre · Php: Php · Debian: Debian Linux · +3 more

Show all products

Pcre: Pcre · Php: Php · Debian: Debian Linux · Canonical: Ubuntu Linux · Fedoraproject: Fedora · Opensuse: Opensuse

1 product

1 product

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Pcre Pcre	Version 7.7

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Php Php	From 5.2.0 to 5.2.7

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 4.0

Configuration D

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 7.04
Canonical Ubuntu Linux	Version 7.10
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 9.10

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 8
Fedoraproject Fedora	Version 9

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 10.3

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (90)

http://bugs.gentoo.org/show_bug.cgi?id=228091

Source: secalert@redhat.com

ExploitIssue Tracking

http://ftp.gnome.org/pub/GNOME/sources/glib/2.16/glib-2.16.4.changes

Source: secalert@redhat.com

Third Party Advisory

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Source: secalert@redhat.com

Mailing List

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Source: secalert@redhat.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=124654546101607&w=2

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

http://marc.info/?l=bugtraq&m=125631037611762&w=2

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

http://secunia.com/advisories/30916

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/30944

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/30945

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/30958

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/30961

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/30967

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/30972

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/30990

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/31200

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/32222

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/32454

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/32746

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/35074

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/35650

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/39300

Source: secalert@redhat.com

Not Applicable

http://security.gentoo.org/glsa/glsa-200811-05.xml

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT3216

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT3549

Source: secalert@redhat.com

Third Party Advisory

http://ubuntu.com/usn/usn-624-2

Source: secalert@redhat.com

Third Party Advisory

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0305

Source: secalert@redhat.com

Broken LinkThird Party Advisory

http://www.debian.org/security/2008/dsa-1602

Source: secalert@redhat.com

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200807-03.xml

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:147

Source: secalert@redhat.com

Broken LinkThird Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2009:023

Source: secalert@redhat.com

Broken LinkThird Party Advisory

http://www.securityfocus.com/archive/1/497828/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/30087

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/31681

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-624-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/usn-628-1

Source: secalert@redhat.com

Third Party Advisory

http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Source: secalert@redhat.com

Third Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2008/2005

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://www.vupen.com/english/advisories/2008/2006

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://www.vupen.com/english/advisories/2008/2336

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://www.vupen.com/english/advisories/2008/2780

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://www.vupen.com/english/advisories/2009/1297

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://www.vupen.com/english/advisories/2010/0833

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00105.html

Source: secalert@redhat.com

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00123.html

Source: secalert@redhat.com

Third Party Advisory

http://bugs.gentoo.org/show_bug.cgi?id=228091