Back to Database
Status published
Medium
CVE-2014-8964
Heap-based buffer overflow in PCRE 8.36 and earlier allows remote...
Vulnerability Description
Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-8964
Credits & Attribution
No credits recorded in the NVD database.
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147474.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html
- http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
- http://www.securityfocus.com/bid/71206
- http://www.exim.org/viewvc/pcre?view=revision&revision=1513
- http://advisories.mageia.org/MGASA-2014-0534.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147511.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145843.html
- http://www.openwall.com/lists/oss-security/2014/11/21/6
- http://rhn.redhat.com/errata/RHSA-2015-0330.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147516.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:002
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:137
- https://bugzilla.redhat.com/show_bug.cgi?id=1166147
- http://bugs.exim.org/show_bug.cgi?id=1546
- https://security.gentoo.org/glsa/201607-02
More from pcre
View All →CVE-2022-41409
Integer overflow vulnerability in pcre2test before 10.41 allows attackers to...
High
7.5
CVE-2020-14155
libpcre in PCRE before 8.44 allows an integer overflow via...
Medium
5.3
CVE-2019-20838
libpcre in PCRE before 8.43 allows a subject buffer over-read...
High
7.5
CVE-2019-20454
An out-of-bounds read was discovered in PCRE before 10.34 when...
Medium
5.1
CVE-2017-8786
pcre2test.c in PCRE2 10.23 allows remote attackers to cause a...
Critical
9.8
Affected Vendor
pcre
View all reports →Affected Software
pcre, mariadb, fedora, opensuse, solaris, enterprise linux desktop, enterprise linux eus, enterprise linux server, enterprise linux server aus, enterprise linux server tus, enterprise linux workstation
Vulnerable Versions:
0, 10.0.0, 19, 20, 21, 13.1, 13.2, 11.2, 7.0, 7.3, 7.4, 7.5, 7.6, 7.7
Timeline
Official Publish:
December 16th, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.