Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PCRE pcre_compile.c 缓冲区错误漏洞
Vulnerability Description
PCRE是Philip Hazel个人开发者的一款使用C语言编写的开源正则表达式函数库。 PCRE 存在缓冲区错误漏洞，该漏洞源于当PCRE在启动模式(pattern)指定选项的时候，为了防止将其不必要的编译到字节代码，会如pcre_compile()选项所指定的方式传送回调用程序(也就是/(?i)a|b/ == /a|b/i)。如果模式包含有多个分支的话，就会意外的将新选项回传的过远，仅有第一个分支获得了新的标记，而在第二次编译传送的时候会一直设置新的标记，导致大小计算传送和实际的编译传送之间出现不匹配
CVSS Information
N/A
Vulnerability Type
N/A