The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3652-1 advisory.

  - The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680     (e.g., the PHP 7.1.1 bundled version) allows remote attackers to cause a denial of service (out-of-bounds     read and application crash) via a crafted regular expression. (CVE-2017-6004)

  - libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service     (segmentation violation for read access, and application crash) by triggering an invalid Unicode property     lookup. (CVE-2017-7186)

  - The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a     denial of service (invalid memory read) via a crafted file. (CVE-2017-7244)

  - Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40     allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other     impact via a crafted file. (CVE-2017-7245)

  - Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40     allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified     other impact via a crafted file. (CVE-2017-7246)

  - libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R     has more than one fixed quantifier, a related issue to CVE-2019-20454. (CVE-2019-20838)

  - libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
    (CVE-2020-14155)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

リモートホストは、GLSA-201710-25（PCRE：複数の脆弱性）で説明されている脆弱性による影響を受けます。複数の脆弱性がPCREライブラリで発見されています。詳細については、以下を参照してください。影響：リモートの攻撃者が、特別に細工されたファイルを介してサービス拒否状態を引き起こす、または他の不特定の影響を及ぼす可能性があります。回避策：現時点では、既知の回避策はありません。

リモートの SUSE Linux SLED12 / SLES12 / SLES_SAP12 ホストには、SUSE-SU-2021:3652-1 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

  -リビジョン 1680 より前の PCRE から 8.xまでの pcre_jit_compile.c の compile_bracket_matchingpath 関数 (例：PHP 7.1.1バンドル版 ) により、リモート攻撃者が、細工された正規表現を介して、サービス拒否 (領域外読み取りとアプリケーションクラッシュ) を引き起こす可能性があります。(CVE-2017-6004)

  - PCRE の libpcre1 8.40および PCRE2 の libpcre2 10.23により、リモート攻撃者が、無効な Unicode プロパティ検索を発生させることで、サービス拒否 (読み取りアクセスのセグメンテーション違反、およびアプリケーションクラッシュ) を引き起こす可能性があります。(CVE-2017-7186)

  - PCRE 8.40の libpcre1 にある pcre_xclass.c の _pcre32_xclass 関数により、リモート攻撃者が、細工されたファイルを介してサービス拒否 (無効なメモリ読み取り) を引き起こす可能性があります。(CVE-2017-7244)

  - PCRE 8.40の pcre_get.c にある pcre32_copy_substring 関数のスタックベースのバッファオーバーフローにより、リモート攻撃者が、細工されたファイルを介して、サービス拒否 (サイズ4のWRITE) を引き起こしたり、詳細不明なその他の影響を与えたりする可能性があります。(CVE-2017-7245)

  - PCRE 8.40の pcre_get.c にある pcre32_copy_substring 関数のスタックベースのバッファオーバーフローにより、リモート攻撃者が、細工されたファイルを介して、サービス拒否 (サイズ 268 の WRITE) を引き起こしたり、詳細不明なその他の影響を与えたりする可能性があります。(CVE-2017-7246)

  - 8.43より前の PCRE の libpcre では、UTF が無効で、\X または \R に複数の修正された量指定子がある場合、JIT でサブジェクトバッファのオーバーリードが発生する可能性があります。これは CVE-2019-20454に関連する問題です。(CVE-2019-20838)

  - 8.44より前の PCRE の libpcre では、(?C サブ文字列の後の大きな数字による整数オーバーフローが可能です。
    (CVE-2020-14155)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

遠端主機受到 GLSA-201710-25 中所述的弱點影響 (PCRE：多個弱點) 在 PCRE Library 中發現多個弱點。如需詳細資料，請檢閱以下參照。影響：遠端攻擊者可能透過特製的檔案造成拒絕服務情況或其他不明影響。因應措施：目前尚無已知的因應措施。

远程主机受到 GLSA-201710-25 中所述漏洞的影响（PCRE：多个漏洞）在 The PCRE Library 中发现多个漏洞。请检查下面的参考以了解详细信息。影响：远程攻击者可能通过特别构建的文件造成拒绝服务情况或产生其他不明影响。解决方法：目前无任何已知的解决方法。

According to the versions of the pcre packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - pcregrep in PCRE before 8.38 mishandles the -q option     for binary files, which might allow remote attackers to     obtain sensitive information via a crafted file, as     demonstrated by a CGI script that sends stdout data to     a client.(CVE-2015-8393)

  - Stack-based buffer overflow in the     pcre32_copy_substring function in pcre_get.c in     libpcre1 in PCRE 8.40 allows remote attackers to cause     a denial of service (WRITE of size 4) or possibly have     unspecified other impact via a crafted     file.(CVE-2017-7245)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - pcre: Integer overflow caused by missing check for certain conditions (8.38/31) (CVE-2015-8394)

  - PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern and related patterns with certain internal     recursive back references, which allows remote attackers to cause a denial of service (segmentation fault)     or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a     JavaScript RegExp object encountered by Konqueror. (CVE-2015-2327)

  - PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote     attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as     demonstrated by /^(?:(?(1)\\.|([^\\\\W_])?)+)+$/. (CVE-2015-3217)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote host is affected by the vulnerability described in GLSA-201710-25 (PCRE: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in The PCRE Library.
      Please review the references below for details.
  Impact :

    A remote attacker could possibly cause a Denial of Service condition or       other unspecified impacts via a specially crafted file.
  Workaround :

    There is no known workaround at this time.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - pcre: inefficient posix character class syntax check (8.38/16) (CVE-2015-8391)

  - pcre: Integer overflow caused by missing check for certain conditions (8.38/31) (CVE-2015-8394)

  - PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern and related patterns with certain internal     recursive back references, which allows remote attackers to cause a denial of service (segmentation fault)     or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a     JavaScript RegExp object encountered by Konqueror. (CVE-2015-2327)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - pcre: Integer overflow caused by missing check for certain conditions (8.38/31) (CVE-2015-8394)

  - The match function in pcre_exec.c in PCRE before 8.37 mishandles the     /(?:((abcd))|(((?:(?:(?:(?:abc|(?:abcdef))))b)abcdefghi)abc)|((*ACCEPT)))/ pattern and related patterns     involving (*ACCEPT), which allows remote attackers to obtain sensitive information from process memory or     cause a denial of service (partially initialized memory and application crash) via a crafted regular     expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-2547.
    (CVE-2015-8382)

  - PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns,     which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified     other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered     by Konqueror. (CVE-2015-8386)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Published	Updated	Severity
155134	SUSE SLED12 / SLES12 Security Update : pcre (SUSE-SU-2021:3652-1)	Nessus	SuSE Local Security Checks	11/11/2021	7/13/2023	high
104068	GLSA-201710-25：PCRE：複数の脆弱性	Nessus	Gentoo Local Security Checks	10/23/2017	1/11/2021	high
155134	SUSE SLED12/ SLES12セキュリティ更新プログラム：pcre (SUSE-SU-2021:3652-1 )	Nessus	SuSE Local Security Checks	11/11/2021	7/13/2023	high
104068	GLSA-201710-25：PCRE：多個弱點	Nessus	Gentoo Local Security Checks	10/23/2017	1/11/2021	high
104068	GLSA-201710-25：PCRE：多个漏洞	Nessus	Gentoo Local Security Checks	10/23/2017	1/11/2021	high
132181	EulerOS 2.0 SP3 : pcre (EulerOS-SA-2019-2646)	Nessus	Huawei Local Security Checks	12/18/2019	4/3/2024	high
200041	RHEL 6 : pcre (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	6/3/2024	critical
104068	GLSA-201710-25 : PCRE: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	10/23/2017	1/11/2021	high
199957	RHEL 7 : pcre (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	6/3/2024	critical
199974	RHEL 5 : pcre (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	6/3/2024	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

high

critical

high

critical

critical