Description
In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report, noting that there are options that can be used to limit the amount of stack that is used
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | pcre3 | No fix yet | — |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | pcre | 7.8-r0 | — |
| Alpine v3.24 | tiff | 4.0.9-r0 | — |
| Alpine v3.23 | pcre | 7.8-r0 | — |
| Alpine v3.23 | tiff | 4.0.9-r0 | — |
| Alpine v3.22 | pcre | 7.8-r0 | — |
| Alpine v3.22 | tiff | 4.0.9-r0 | — |
| Alpine v3.21 | pcre | 7.8-r0 | — |
| Alpine v3.21 | tiff | 4.0.9-r0 | — |
| Alpine v3.20 | pcre | 7.8-r0 | — |
| Alpine v3.20 | tiff | 4.0.9-r0 | — |
Show 17 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | pcre | 7.8-r0 | — |
| Alpine v3.19 | tiff | 4.0.9-r0 | — |
| Alpine v3.18 | pcre | 7.8-r0 | — |
| Alpine v3.18 | tiff | 4.0.9-r0 | — |
| Alpine v3.17 | pcre | 7.8-r0 | — |
| Alpine v3.17 | tiff | 4.0.9-r0 | — |
| Alpine v3.16 | pcre | 7.8-r0 | — |
| Alpine v3.16 | tiff | 4.0.9-r0 | — |
| Alpine v3.15 | pcre | 7.8-r0 | — |
| Alpine v3.15 | tiff | 4.0.9-r0 | — |
| Alpine v3.14 | pcre | 7.8-r0 | — |
| Alpine v3.14 | tiff | 4.0.9-r0 | — |
| Alpine v3.13 | pcre | 7.8-r0 | — |
| Alpine v3.13 | tiff | 4.0.9-r0 | — |
| Alpine v3.12 | pcre | 7.8-r0 | — |
| Alpine v3.12 | tiff | 4.0.9-r0 | — |
| Alpine v3.11 | pcre | 7.8-r0 | — |
| Alpine v3.11 | tiff | 4.0.9-r0 | — |
| Alpine v3.10 | pcre | 7.8-r0 | — |
| Alpine v3.10 | tiff | 4.0.9-r0 | — |
| Alpine v3.9 | pcre | 7.8-r0 | — |
| Alpine v3.9 | tiff | 4.0.9-r0 | — |
| Alpine v3.8 | pcre | 7.8-r0 | — |
| Alpine v3.8 | tiff | 4.0.9-r0 | — |
| Alpine v3.7 | pcre | 7.8-r0 | — |
| Alpine v3.7 | tiff | 4.0.9-r0 | — |
| Alpine v3.6 | pcre | 7.8-r0 | — |
| Alpine v3.6 | tiff | 4.0.9-r0 | — |
| Alpine v3.5 | pcre | 7.8-r0 | — |
| Alpine v3.5 | tiff | 4.0.9-r0 | — |
| Alpine v3.4 | pcre | 7.8-r0 | — |
| Alpine v3.4 | tiff | 4.0.9-r0 | — |
| Alpine v3.3 | pcre | 7.8-r0 | — |
| Alpine v3.3 | tiff | 4.0.9-r0 | — |
References
- http://packetstormsecurity.com/files/150897/PCRE-8.41-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2018/Dec/33
- http://www.openwall.com/lists/oss-security/2017/11/01/11
- http://www.openwall.com/lists/oss-security/2017/11/01/3
- http://www.openwall.com/lists/oss-security/2017/11/01/7
- http://www.openwall.com/lists/oss-security/2017/11/01/8
- http://www.securityfocus.com/bid/101688
- https://bugs.exim.org/show_bug.cgi?id=2047