CVE-2006-7230

2007-11-1500:00:00

ubuntu.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.024

Percentile

90.0%

JSON

Perl-Compatible Regular Expression (PCRE) library before 7.0 does not
properly calculate the amount of memory needed for a compiled regular
expression pattern when the (1) -x or (2) -i UTF-8 options change within
the pattern, which allows context-dependent attackers to cause a denial of
service (PCRE or glibc crash) via crafted regular expressions.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchpcre3< 7.4-0ubuntu0.6.06.1UNKNOWN
ubuntu6.10noarchpcre3< 7.4-0ubuntu0.6.10.1UNKNOWN
ubuntu7.04noarchpcre3< 7.4-0ubuntu0.7.04.1UNKNOWN