oss-sec mailing list archives

Re: Re: CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match()

From: "Hhjack" <82100840 () qq com>
Date: Thu, 4 Jun 2015 00:39:38 +0800

As far as I tested, 8.33, 8.34, 8.35, 8.36, 8.37 were confirmed to be affected.
PCRE2 10.10 is also confirmed to be vulnerable.
Other version may also be affected.


Cheers, 
Wen

Current thread:

CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match() wen_guanxing (Jun 03)
- Re: CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match() Dan McDonald (Jun 03)
- <Possible follow-ups>
- Re: Re: CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match() Hhjack (Jun 03)
  - Re: Re: Re: CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match() Tavis Ormandy (Jun 03)
- Re: Re: Re: Re: CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match() wen_guanxing (Jun 03)
  - Re: Re: Re: Re: Re: CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match() Felipe Pena (Jun 04)
- Re: Re: Re: Re: Re: Re: CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match() Guanxing Wen (Jun 04)