[arch-security] [Arch Linux Security Advisory ASA-201411-29] pcre: heap buffer overflow
rgacogne at archlinux.org
Wed Nov 26 09:04:47 UTC 2014
Arch Linux Security Advisory ASA-201411-29
Date : 2014-11-26
CVE-ID : CVE-2014-8964
Package : pcre
Type : heap buffer overflow
Remote : No
Link : https://wiki.archlinux.org/index.php/CVE-2014
The package pcre before version 8.36-2 is vulnerable to denial of
service via a heap buffer overlow.
Upgrade to 8.36-2.
# pacman -Syu "pcre>=8.36-2"
The problem has been fixed upstream but no version released yet.
A heap buffer overflow issue was found in PCRE when processing a
specially crafted regular expression, causing a denial of service or
other unspecified impact.
An attacker able to supply a specially crafted regular expression can
cause a denial of service, or other unspecified impact.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 819 bytes
Desc: OpenPGP digital signature
More information about the arch-security