SB2016032802 - Denial of service in PCRE PCRE
Published: March 28, 2016 Updated: October 11, 2022
Security Bulletin ID
SB2016032802
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Denial of service (CVE-ID: CVE-2014-9769)
The vulnerability allows a remote unauthenticated user to cause DoS conditions on the target system.The weakness is due to improper input validation during the compilation of malformed regular expressions with nested alternatives. By regular sending a specially crafted expression string to the application using the PCRE library attackers can cause the application to cease proper functionality.
Successful exploitation of the vulnerability will result in denial of service on the vulnerable system.
Remediation
Install update from vendor's website.