July 2017 - Arch-security - lists.archlinux.org

[arch-security] [ASA-201707-30] cacti: cross-site scripting
by Remi Gacogne 28 Jul '17

28 Jul '17

Arch Linux Security Advisory ASA-201707-30 ========================================== Severity: Medium Date : 2017-07-27 CVE-ID : CVE-2017-11691 Package : cacti Type : cross-site scripting Remote : Yes Link : https://security.archlinux.org/AVG-365 Summary ======= The package cacti before version 1.1.14-1 is vulnerable to cross-site scripting. Resolution ========== Upgrade to 1.1.14-1. # pacman -Syu "cacti>=1.1.14-1" The problem has been fixed upstream in version 1.1.14. Workaround ========== None. Description =========== A cross-site scripting vulnerability has been found in Cacti <= 1.1.13, in the user profile management page (auth_profile.php), allowing inject arbitrary web script or HTML via specially crafted HTTP Referer headers. Impact ====== A remote authenticated attacker might be able to inject arbitrary web script or HTML via crafted Referer headers. References ========== http://seclists.org/oss-sec/2017/q3/217 https://github.com/Cacti/cacti/issues/867 https://github.com/Cacti/cacti/commit/104090aeead4aa433bf1f18cd6d52dcfeb712… https://security.archlinux.org/CVE-2017-11691

1 0

[arch-security] [ASA-201707-29] chromium: multiple issues
by Remi Gacogne 28 Jul '17

28 Jul '17

Arch Linux Security Advisory ASA-201707-29 ========================================== Severity: Critical Date : 2017-07-27 CVE-ID : CVE-2017-5091 CVE-2017-5092 CVE-2017-5093 CVE-2017-5094 CVE-2017-5095 CVE-2017-5097 CVE-2017-5098 CVE-2017-5099 CVE-2017-5100 CVE-2017-5101 CVE-2017-5102 CVE-2017-5103 CVE-2017-5104 CVE-2017-5105 CVE-2017-5106 CVE-2017-5107 CVE-2017-5108 CVE-2017-5109 CVE-2017-5110 CVE-2017-7000 Package : chromium Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-363 Summary ======= The package chromium before version 60.0.3112.78-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing and information disclosure. Resolution ========== Upgrade to 60.0.3112.78-1. # pacman -Syu "chromium>=60.0.3112.78-1" The problems have been fixed upstream in version 60.0.3112.78. Workaround ========== None. Description =========== - CVE-2017-5091 (arbitrary code execution) A use after free vulnerability has been found in the IndexedDB component of the Chromium browser < 60.0.3112.78. - CVE-2017-5092 (arbitrary code execution) A use after free vulnerability has been found in the PPAPI component of the Chromium browser < 60.0.3112.78. - CVE-2017-5093 (content spoofing) A UI spoofing vulnerability has been found in the Blink component of the Chromium browser < 60.0.3112.78. - CVE-2017-5094 (arbitrary code execution) A type confusion vulnerability has been found in the extensions component of the Chromium browser < 60.0.3112.78. - CVE-2017-5095 (arbitrary code execution) An out-of-bounds write vulnerability has been found in the PDFium component of the Chromium browser < 60.0.3112.78. - CVE-2017-5097 (information disclosure) An out-of-bounds read vulnerability has been found in the Skia component of the Chromium browser < 60.0.3112.78. - CVE-2017-5098 (arbitrary code execution) A use-after-free vulnerability has been found in the V8 component of the Chromium browser < 60.0.3112.78. - CVE-2017-5099 (arbitrary code execution) An out-of-bounds write vulnerability has been found in the PPAPI component of the Chromium browser < 60.0.3112.78. - CVE-2017-5100 (arbitrary code execution) A use-after-free vulnerability has been found in the Chrome Apps component of the Chromium browser < 60.0.3112.78. - CVE-2017-5101 (content spoofing) A URL spoofing vulnerability has been found in the Omnibox component of the Chromium browser < 60.0.3112.78. - CVE-2017-5102 (information disclosure) An uninitialized use vulnerability has been found in the Skia component of the Chromium browser < 60.0.3112.78. - CVE-2017-5103 (information disclosure) An uninitialized use vulnerability has been found in the Skia component of the Chromium browser < 60.0.3112.78. - CVE-2017-5104 (content spoofing) A UI spoofing vulnerability has been found in the Chromium browser < 60.0.3112.78. - CVE-2017-5105 (content spoofing) A URL spoofing vulnerability has been found in the Omnibox component of the Chromium browser < 60.0.3112.78. - CVE-2017-5106 (content spoofing) A URL spoofing vulnerability using Cyrillic letters has been found in the Omnibox component of the Chromium browser < 60.0.3112.78. - CVE-2017-5107 (information disclosure) An information leakage vulnerability has been found in the Chromium browser < 60.0.3112.78. By rendering a FeConvolveMatrix SVG filter over a target iframe and timing its execution an attacking page can extract pixel values from a cross-origin page being iframe'd. This also allows reading ones own origin for history sniffing. - CVE-2017-5108 (arbitrary code execution) A type confusion vulnerability has been found in the PDFium component of the Chromium browser < 60.0.3112.78. - CVE-2017-5109 (content spoofing) A UI spoofing vulnerability has been found in the Chromium browser < 60.0.3112.78. - CVE-2017-5110 (content spoofing) A UI spoofing vulnerability has been found in the payments dialog component of the Chromium browser < 60.0.3112.78. - CVE-2017-7000 (information disclosure) A pointer disclosure vulnerability has been found in SQLite, as used in the Chromium browser < 60.0.3112.78. Impact ====== A remote attacker can spoof the content displayed to the user, access sensitive information and execute arbitrary code on the affected host. References ========== https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-des… https://crbug.com/728887 https://crbug.com/733549 https://crbug.com/550017 https://crbug.com/702946 https://crbug.com/732661 https://crbug.com/740789 https://crbug.com/740803 https://crbug.com/733548 https://crbug.com/718292 https://crbug.com/681740 https://crbug.com/727678 https://crbug.com/726199 https://crbug.com/729105 https://crbug.com/729979 https://crbug.com/714628 https://crbug.com/686253 https://crbug.com/695830 https://crbug.com/710400 https://crbug.com/717476 https://crbug.com/742407 https://security.archlinux.org/CVE-2017-5091 https://security.archlinux.org/CVE-2017-5092 https://security.archlinux.org/CVE-2017-5093 https://security.archlinux.org/CVE-2017-5094 https://security.archlinux.org/CVE-2017-5095 https://security.archlinux.org/CVE-2017-5097 https://security.archlinux.org/CVE-2017-5098 https://security.archlinux.org/CVE-2017-5099 https://security.archlinux.org/CVE-2017-5100 https://security.archlinux.org/CVE-2017-5101 https://security.archlinux.org/CVE-2017-5102 https://security.archlinux.org/CVE-2017-5103 https://security.archlinux.org/CVE-2017-5104 https://security.archlinux.org/CVE-2017-5105 https://security.archlinux.org/CVE-2017-5106 https://security.archlinux.org/CVE-2017-5107 https://security.archlinux.org/CVE-2017-5108 https://security.archlinux.org/CVE-2017-5109 https://security.archlinux.org/CVE-2017-5110 https://security.archlinux.org/CVE-2017-7000

1 0

[arch-security] [ASA-201707-28] wireshark-cli: denial of service
by Remi Gacogne 27 Jul '17

27 Jul '17

Arch Linux Security Advisory ASA-201707-28 ========================================== Severity: Low Date : 2017-07-26 CVE-ID : CVE-2017-11406 CVE-2017-11407 CVE-2017-11408 CVE-2017-11410 CVE-2017-11411 Package : wireshark-cli Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-356 Summary ======= The package wireshark-cli before version 2.2.8-1 is vulnerable to denial of service. Resolution ========== Upgrade to 2.2.8-1. # pacman -Syu "wireshark-cli>=2.2.8-1" The problems have been fixed upstream in version 2.2.8. Workaround ========== None. Description =========== - CVE-2017-11406 (denial of service) A security issue has been found in the DOCSIS dissector of wireshark <= 2.2.7. A crafted packet could make wireshark go into an infinite loop, causing a denial of service. - CVE-2017-11407 (denial of service) A security issue has been found in the MQ dissector of wireshark <= 2.2.7. A crafted packet could make wireshark try to allocate a huge amount of memory, resulting in a denial of service. - CVE-2017-11408 (denial of service) A security issue has been found in the AMQP dissector of wireshark <= 2.2.7. A crafted packet could make wireshark overflow the stack by getting into a infinite recursion loop, causing a denial of service. - CVE-2017-11410 (denial of service) A security issue has been found in the WBXML dissector of wireshark <= 2.2.7. A crafted packet could make wireshark go into an infinite loop, causing a denial of service. This issue is the result of an incomplete fix for CVE-2017-7702. - CVE-2017-11411 (denial of service) A security issue has been found in the openSAFETY dissector of wireshark <= 2.2.7. A crafted packet could make wireshark allocate a huge amount of memory, causing a denial of service. This issue is the result of an incomplete fix for CVE-2017-9350. Impact ====== A remote attacker can cause a denial of service via a crafted network packet or a crafted PCAP file. References ========== https://www.wireshark.org/docs/relnotes/wireshark-2.2.8.html https://www.wireshark.org/security/wnpa-sec-2017-36.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13797 https://www.wireshark.org/security/wnpa-sec-2017-35.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13792 https://www.wireshark.org/security/wnpa-sec-2017-34.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13780 https://www.wireshark.org/security/wnpa-sec-2017-13.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13477 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13796 https://www.wireshark.org/security/wnpa-sec-2017-28.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13649 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13755 https://security.archlinux.org/CVE-2017-11406 https://security.archlinux.org/CVE-2017-11407 https://security.archlinux.org/CVE-2017-11408 https://security.archlinux.org/CVE-2017-11410 https://security.archlinux.org/CVE-2017-11411

1 0

[arch-security] [ASA-201707-27] lib32-expat: denial of service
by Remi Gacogne 27 Jul '17

27 Jul '17

Arch Linux Security Advisory ASA-201707-27 ========================================== Severity: Medium Date : 2017-07-26 CVE-ID : CVE-2016-9063 CVE-2017-9233 Package : lib32-expat Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-305 Summary ======= The package lib32-expat before version 2.2.2-1 is vulnerable to denial of service. Resolution ========== Upgrade to 2.2.2-1. # pacman -Syu "lib32-expat>=2.2.2-1" The problems have been fixed upstream in version 2.2.2. Workaround ========== None. Description =========== - CVE-2016-9063 (denial of service) An integer overflow vulnerability has been discovered during the parsing of XML using the Expat library. - CVE-2017-9233 (denial of service) An external entity infinite loop issue has been found in Expat < 2.2.1, leading to a denial of service. Impact ====== An attacker can cause a denial of service in an application using lib32-expat by sending a crafted XML payload. References ========== https://www.mozilla.org/en-US/security/advisories/mfsa2016-89/#CVE-2016-9063 https://github.com/libexpat/libexpat/commit/d4f735b88d9932bd5039df2335eefdd… https://libexpat.github.io/doc/cve-2017-9233/ https://security.archlinux.org/CVE-2016-9063 https://security.archlinux.org/CVE-2017-9233

1 0

[arch-security] [ASA-201707-25] webkit2gtk: multiple issues
by Remi Gacogne 26 Jul '17

26 Jul '17

Arch Linux Security Advisory ASA-201707-25 ========================================== Severity: Critical Date : 2017-07-26 CVE-ID : CVE-2017-7018 CVE-2017-7030 CVE-2017-7034 CVE-2017-7037 CVE-2017-7039 CVE-2017-7046 CVE-2017-7048 CVE-2017-7055 CVE-2017-7056 CVE-2017-7061 CVE-2017-7064 Package : webkit2gtk Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-362 Summary ======= The package webkit2gtk before version 2.16.6-1 is vulnerable to multiple issues including arbitrary code execution and information disclosure. Resolution ========== Upgrade to 2.16.6-1. # pacman -Syu "webkit2gtk>=2.16.6-1" The problems have been fixed upstream in version 2.16.6. Workaround ========== None. Description =========== - CVE-2017-7018 (arbitrary code execution) Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents. - CVE-2017-7030 (arbitrary code execution) Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents. - CVE-2017-7034 (arbitrary code execution) Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents. - CVE-2017-7037 (arbitrary code execution) Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents. - CVE-2017-7039 (arbitrary code execution) Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents. - CVE-2017-7046 (arbitrary code execution) Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents. - CVE-2017-7048 (arbitrary code execution) Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents. - CVE-2017-7055 (arbitrary code execution) Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents. - CVE-2017-7056 (arbitrary code execution) Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents. - CVE-2017-7061 (arbitrary code execution) Several memory corruption issues have been found in WebKitGTK+ <= 2.16.5, leading to arbitrary code execution when processing maliciously crafted web contents. - CVE-2017-7064 (information disclosure) An information disclosure issue has been found in WebKitGTK+ <= 2.16.5, where an application may be able to read restricted memory. Impact ====== A remote attacker might be able to access sensitive information or execute arbitrary code on the affected host. References ========== https://webkitgtk.org/security/WSA-2017-0006.html https://security.archlinux.org/CVE-2017-7018 https://security.archlinux.org/CVE-2017-7030 https://security.archlinux.org/CVE-2017-7034 https://security.archlinux.org/CVE-2017-7037 https://security.archlinux.org/CVE-2017-7039 https://security.archlinux.org/CVE-2017-7046 https://security.archlinux.org/CVE-2017-7048 https://security.archlinux.org/CVE-2017-7055 https://security.archlinux.org/CVE-2017-7056 https://security.archlinux.org/CVE-2017-7061 https://security.archlinux.org/CVE-2017-7064

1 0

[arch-security] [ASA-201707-24] rkhunter: arbitrary code execution
by Levente Polyak 18 Jul '17

18 Jul '17

Arch Linux Security Advisory ASA-201707-24 ========================================== Severity: High Date : 2017-07-18 CVE-ID : CVE-2017-7480 Package : rkhunter Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-334 Summary ======= The package rkhunter before version 1.4.4-1 is vulnerable to arbitrary code execution. Resolution ========== Upgrade to 1.4.4-1. # pacman -Syu "rkhunter>=1.4.4-1" The problem has been fixed upstream in version 1.4.4. Workaround ========== None. Description =========== rkhunter downloads updates over a plain HTTP link with a version certificate that can be faked. A potential man-in-the-middle attack can lead to the execution of arbitrary code. Impact ====== A remote attacker in position of man-in-the-middle is able to execute arbitrary code by injecting a malicious update. References ========== http://openwall.com/lists/oss-security/2017/06/29/2 https://security.archlinux.org/CVE-2017-7480

1 0

[arch-security] [ASA-201707-23] freeradius: multiple issues
by Remi Gacogne 18 Jul '17

18 Jul '17

Arch Linux Security Advisory ASA-201707-23 ========================================== Severity: Critical Date : 2017-07-18 CVE-ID : CVE-2017-10978 CVE-2017-10983 CVE-2017-10984 CVE-2017-10985 CVE-2017-10986 CVE-2017-10987 Package : freeradius Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-357 Summary ======= The package freeradius before version 3.0.15-1 is vulnerable to multiple issues including arbitrary code execution and denial of service. Resolution ========== Upgrade to 3.0.15-1. # pacman -Syu "freeradius>=3.0.15-1" The problems have been fixed upstream in version 3.0.15. Workaround ========== None. Description =========== - CVE-2017-10978 (denial of service) A security issue has been found in freeradius <= 3.0.15, where the make_secret() function does not properly check for output buffer size before writing data. A remote attacker with the ability to send packets which are accepted by the server can perform a read or write overflow of up to 16 octets, causing a denial of service. - CVE-2017-10983 (denial of service) A security issue has been found in freeradius <= 3.0.15, where the fr_dhcp_decode() function performed a strcmp() on binary data in an internal data structure, instead of checking the length of the option and doing a memcmp. A remote attacker with the ability to send packets which are accepted by the server can make the server read its memory until it reaches a zero byte or crashes, causing a denial of service. - CVE-2017-10984 (arbitrary code execution) A security issue has been found in freeradius <= 3.0.15, where the data2vp_wimax() function checks for WiMAX attributes which are too small, but it does not check for WiMAX attributes which are too large. As a result, the server can be convinced to read past the end of an attribute, and to write past the end of memory allocated via malloc(). A remote attacker with the ability to send packets which are accepted by the server can cause a write overflow, possibly leading to remote code execution. - CVE-2017-10985 (denial of service) A security issue has been found in freeradius <= 3.0.15, where the server could go into an infinite loop and exhaust memory when it receives zero-length attributes marked 'concat' in the dictionaries. - CVE-2017-10986 (denial of service) A security issue has been found in freeradius <= 3.0.15, where the dhcp_attr2vp() function, when decoding "string" options in an array, could be convinced to call memchr() with a length argument of -1. This could result in an over-read until the first zero octet was found, or a page fault occurred. - CVE-2017-10987 (denial of service) A security issue has been found in freeradius <= 3.0.15, where the fr_dhcp_decode_suboptions() function does not properly check if sub- options overflow the packet. Impact ====== A remote attacker with the ability to send packets which are accepted by the server can cause a denial of service or execute arbitrary code on the affected host via a crafted packet. References ========== http://freeradius.org/security/fuzzer-2017.html http://freeradius.org/security/fuzzer-2017.html#FR-GV-201 https://github.com/FreeRADIUS/freeradius-server/commit/38ee90f2a5a28dc5887a… https://github.com/FreeRADIUS/freeradius-server/commit/fc8662d7e827f630d515… http://freeradius.org/security/fuzzer-2017.html#FR-GV-206 https://github.com/FreeRADIUS/freeradius-server/commit/5759b20af99af6d30924… http://freeradius.org/security/fuzzer-2017.html#FR-GV-301 https://github.com/FreeRADIUS/freeradius-server/commit/931850e5d2f65193520c… http://freeradius.org/security/fuzzer-2017.html#FR-GV-302 https://github.com/FreeRADIUS/freeradius-server/commit/6726c16549b131ed39f6… http://freeradius.org/security/fuzzer-2017.html#FR-GV-303 https://github.com/FreeRADIUS/freeradius-server/commit/21e2e95751bfb54c0fb0… http://freeradius.org/security/fuzzer-2017.html#FR-GV-304 https://github.com/FreeRADIUS/freeradius-server/commit/19a18bf7c8af649c9e97… https://security.archlinux.org/CVE-2017-10978 https://security.archlinux.org/CVE-2017-10983 https://security.archlinux.org/CVE-2017-10984 https://security.archlinux.org/CVE-2017-10985 https://security.archlinux.org/CVE-2017-10986 https://security.archlinux.org/CVE-2017-10987

1 0

[arch-security] [ASA-201707-22] vim: arbitrary code execution
by Levente Polyak 18 Jul '17

18 Jul '17

Arch Linux Security Advisory ASA-201707-22 ========================================== Severity: High Date : 2017-07-18 CVE-ID : CVE-2017-11109 Package : vim Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-347 Summary ======= The package vim before version 8.0.0722-1 is vulnerable to arbitrary code execution. Resolution ========== Upgrade to 8.0.0722-1. # pacman -Syu "vim>=8.0.0722-1" The problem has been fixed upstream in version 8.0.0722. Workaround ========== None. Description =========== Vim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a crafted source (aka -S) file. Impact ====== An attacker is able to execute arbitrary code by tricking a user to locally execute a specially crafted vim source file. References ========== https://bugs.archlinux.org/task/54773 https://bugzilla.redhat.com/show_bug.cgi?id=1468492 https://www.mail-archive.com/vim_dev%40googlegroups.com/msg45274.html https://security.archlinux.org/CVE-2017-11109

1 0

[arch-security] [ASA-201707-21] c-ares: information disclosure
by Levente Polyak 18 Jul '17

18 Jul '17

Arch Linux Security Advisory ASA-201707-21 ========================================== Severity: Medium Date : 2017-07-18 CVE-ID : CVE-2017-1000381 Package : c-ares Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-315 Summary ======= The package c-ares before version 1.13.0-1 is vulnerable to information disclosure. Resolution ========== Upgrade to 1.13.0-1. # pacman -Syu "c-ares>=1.13.0-1" The problem has been fixed upstream in version 1.13.0. Workaround ========== None. Description =========== A out-of-bounds read has been found in c-ares < 1.13.0. The ares_parse_naptr_reply() function, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way. Impact ====== A remote attacker might be able to access sensitive information by responding to a DNS query with a crafted response packet. References ========== https://c-ares.haxx.se/adv_20170620.html https://security.archlinux.org/CVE-2017-1000381

1 0

[arch-security] [ASA-201707-20] pcre: multiple issues
by Levente Polyak 18 Jul '17

18 Jul '17

Arch Linux Security Advisory ASA-201707-20 ========================================== Severity: Medium Date : 2017-07-18 CVE-ID : CVE-2017-7186 CVE-2017-7244 CVE-2017-7245 CVE-2017-7246 Package : pcre Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-222 Summary ======= The package pcre before version 8.41-1 is vulnerable to multiple issues including denial of service and arbitrary code execution. Resolution ========== Upgrade to 8.41-1. # pacman -Syu "pcre>=8.41-1" The problems have been fixed upstream in version 8.41. Workaround ========== None. Description =========== - CVE-2017-7186 (denial of service) libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode property lookup. - CVE-2017-7244 (denial of service) A stack-based read buffer overflow has been found in libpcre <= 8.40, in the pcretest utility. It can lead to denial of service via a crafted expression passed to the pcretest command. - CVE-2017-7245 (arbitrary code execution) A stack-based write buffer overflow has been found in libpcre <= 8.40, in the pcretest utility. It can lead to arbitrary code execution via a crafted expression passed to the pcretest command. - CVE-2017-7246 (arbitrary code execution) A stack-based write buffer overflow has been found in libpcre <= 8.40, in the pcretest utility. It can lead to arbitrary code execution via a crafted expression passed to the pcretest command. Impact ====== An attacker can execute arbitrary code on the affected host by tricking a user into passing a crafted expression to the pcretest command. A remote attacker can cause a denial of service against an application using libpcre via a crafted expression. References ========== https://vcs.pcre.org/pcre/code/trunk/pcre_ucd.c?r1=1490&r2=1688&sortby=date https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-over… https://blogs.gentoo.org/ago/2017/03/20/libpcre-invalid-memory-read-in-_pcr… https://bugs.exim.org/show_bug.cgi?id=2052 https://blogs.gentoo.org/ago/2017/03/14/libpcre-invalid-memory-read-in-matc… https://vcs.pcre.org/pcre2/code/trunk/src/pcre2_internal.h?r1=600&r2=670&so… https://vcs.pcre.org/pcre2/code/trunk/src/pcre2_ucd.c?r1=316&r2=670&sortby=… https://security.archlinux.org/CVE-2017-7186 https://security.archlinux.org/CVE-2017-7244 https://security.archlinux.org/CVE-2017-7245 https://security.archlinux.org/CVE-2017-7246

1 0