Index: vuln.xml =================================================================== --- vuln.xml (revision 390877) +++ vuln.xml (working copy) @@ -57,6 +57,42 @@ --> + + pcre -- Heap Overflow Vulnerability in find_fixedlength() + + + pcre + 8.37_2 + + + + +

Venustech ADLAB reports:

+
PCRE library is prone to a vulnerability which leads to Heap + Overflow. During subpattern calculation of a malformed regular + expression, an offset that is used as an array index is fully + controlled and can be large enough so that unexpected heap + memory regions are accessed.
+
One could at least exploit this issue to read objects nearby of + the affected application's memory.
+
Such information disclosure may also be used to bypass memory + protection method such as ASLR.
+

+ + + + CVE-2015-5073 + https://bugs.exim.org/show_bug.cgi?id=1651 + http://vcs.pcre.org/pcre?view=revision&revision=1571 + http://www.openwall.com/lists/oss-security/2015/06/26/1 + + + 2015-06-23 + 2015-06-29 + + + qemu -- Heap overflow in QEMU PCNET controller, allowing guest to host escape (CVE-2015-3209)