Fluid Attacks Database

Description

Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to cause a denial of service (error or crash) via a regular expression that involves a "malformed POSIX character class", as demonstrated via an invalid character after a [[ sequence.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	glib2.0	>=0 <2.14.3-1	2.14.3-1
debian 14	glib2.0	>=0 <2.14.3-1	2.14.3-1
debian 12	glib2.0	>=0 <2.14.3-1	2.14.3-1
debian 13	glib2.0	>=0 <2.14.3-1	2.14.3-1
debian 11	pcre3	>=0 <6.7-1	6.7-1
debian 12	pcre3	>=0 <6.7-1	6.7-1
rpm rhel5	pcre	<0:6.6-2.el5_1.7	0:6.6-2.el5_1.7

Aliases

1. CVE-2006-72252. NVD-2006-72253. OSV-DEBIAN-2006-72254. OSV-2006-72255. SECURITY-TRACKER-CVE-2006-7225

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.