Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-7226
HistoryDec 03, 2007 - 12:00 a.m.

CVE-2006-7226

2007-12-0300:00:00
ubuntu.com
ubuntu.com
15

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.053

Percentile

93.2%

Perl-Compatible Regular Expression (PCRE) library before 6.7 does not
properly calculate the compiled memory allocation for regular expressions
that involve a quantified “subpattern containing a named recursion or
subroutine reference,” which allows context-dependent attackers to cause a
denial of service (error or crash).

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchpcre3< 7.4-0ubuntu0.6.06.1UNKNOWN
ubuntu6.10noarchpcre3< 7.4-0ubuntu0.6.10.1UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.053

Percentile

93.2%