Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - pcre: Integer overflow caused by missing check for certain conditions (8.38/31) (CVE-2015-8394)

  - PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern and related patterns with certain internal     recursive back references, which allows remote attackers to cause a denial of service (segmentation fault)     or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a     JavaScript RegExp object encountered by Konqueror. (CVE-2015-2327)

  - PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote     attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as     demonstrated by /^(?:(?(1)\\.|([^\\\\W_])?)+)+$/. (CVE-2015-3217)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - pcre: Integer overflow caused by missing check for certain conditions (8.38/31) (CVE-2015-8394)

  - The match function in pcre_exec.c in PCRE before 8.37 mishandles the     /(?:((abcd))|(((?:(?:(?:(?:abc|(?:abcdef))))b)abcdefghi)abc)|((*ACCEPT)))/ pattern and related patterns     involving (*ACCEPT), which allows remote attackers to obtain sensitive information from process memory or     cause a denial of service (partially initialized memory and application crash) via a crafted regular     expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-2547.
    (CVE-2015-8382)

  - PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns,     which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified     other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered     by Konqueror. (CVE-2015-8386)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - pcre: inefficient posix character class syntax check (8.38/16) (CVE-2015-8391)

  - pcre: Integer overflow caused by missing check for certain conditions (8.38/31) (CVE-2015-8394)

  - PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern and related patterns with certain internal     recursive back references, which allows remote attackers to cause a denial of service (segmentation fault)     or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a     JavaScript RegExp object encountered by Konqueror. (CVE-2015-2327)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3652-1 advisory.

  - The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680     (e.g., the PHP 7.1.1 bundled version) allows remote attackers to cause a denial of service (out-of-bounds     read and application crash) via a crafted regular expression. (CVE-2017-6004)

  - libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service     (segmentation violation for read access, and application crash) by triggering an invalid Unicode property     lookup. (CVE-2017-7186)

  - The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a     denial of service (invalid memory read) via a crafted file. (CVE-2017-7244)

  - Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40     allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other     impact via a crafted file. (CVE-2017-7245)

  - Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40     allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified     other impact via a crafted file. (CVE-2017-7246)

  - libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R     has more than one fixed quantifier, a related issue to CVE-2019-20454. (CVE-2019-20838)

  - libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
    (CVE-2020-14155)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the pcre packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - pcregrep in PCRE before 8.38 mishandles the -q option     for binary files, which might allow remote attackers to     obtain sensitive information via a crafted file, as     demonstrated by a CGI script that sends stdout data to     a client.(CVE-2015-8393)

  - Stack-based buffer overflow in the     pcre32_copy_substring function in pcre_get.c in     libpcre1 in PCRE 8.40 allows remote attackers to cause     a denial of service (WRITE of size 4) or possibly have     unspecified other impact via a crafted     file.(CVE-2017-7245)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201710-25 (PCRE: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in The PCRE Library.
      Please review the references below for details.
  Impact :

    A remote attacker could possibly cause a Denial of Service condition or       other unspecified impacts via a specially crafted file.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
200041	RHEL 6 : pcre (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199974	RHEL 5 : pcre (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199957	RHEL 7 : pcre (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
196331	RHEL 5 : pcre (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
196306	RHEL 7 : pcre (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
196283	RHEL 6 : pcre (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
155134	SUSE SLED12 / SLES12 Security Update : pcre (SUSE-SU-2021:3652-1)	Nessus	SuSE Local Security Checks	high
132181	EulerOS 2.0 SP3 : pcre (EulerOS-SA-2019-2646)	Nessus	Huawei Local Security Checks	high
104068	GLSA-201710-25 : PCRE: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2017-7245

high

Tenable Plugins

critical

critical

critical

high

high

high

high

high

high