Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-1659
HistoryNov 07, 2007 - 12:00 a.m.

CVE-2007-1659

2007-11-0700:00:00
ubuntu.com
ubuntu.com
13

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.041

Percentile

92.2%

Perl-Compatible Regular Expression (PCRE) library before 7.3 allows
context-dependent attackers to cause a denial of service (crash) and
possibly execute arbitrary code via regex patterns containing unmatched
“\Q\E” sequences with orphan “\E” codes.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchpcre3< 7.4-0ubuntu0.6.06.1UNKNOWN
ubuntu6.10noarchpcre3< 7.4-0ubuntu0.6.10.1UNKNOWN
ubuntu7.04noarchpcre3< 7.4-0ubuntu0.7.04.1UNKNOWN
ubuntu7.10noarchpcre3< 7.4-0ubuntu0.7.10.1UNKNOWN

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.041

Percentile

92.2%