CVE-2006-7230

N/A
Published: November 15, 2007 at 07:00 PM UTC
Updated: June 16, 2026 at 10:34 PM UTC
1 product affected across 1 vendorPcre

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%

Description

Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate the amount of memory needed for a compiled regular expression pattern when the (1) -x or (2) -i UTF-8 options change within the pattern, which allows context-dependent attackers to cause a denial of service (PCRE or glibc crash) via crafted regular expressions.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≤ 6.9

References (28)

Third Party Advisoryx_refsource_SECUNIA
http://secunia.com/advisories/27741
Third Party Advisoryx_refsource_SECUNIA
http://secunia.com/advisories/27773
Third Party Advisoryx_refsource_SECUNIA
http://secunia.com/advisories/28041
Third Party Advisoryx_refsource_SECUNIA
http://secunia.com/advisories/28406
Third Party Advisoryx_refsource_SECUNIA
http://secunia.com/advisories/28414
Third Party Advisoryx_refsource_SECUNIA
http://secunia.com/advisories/28658

CVSS

Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-189

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card