CVE-2006-7225

Perl-Compatible Regular Expression (PCRE) < 6.7 - Denial of Service via Malformed POSIX Character Class

Title source: llm
STIX 2.1

Description

Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to cause a denial of service (error or crash) via a regular expression that involves a "malformed POSIX character class", as demonstrated via an invalid character after a [[ sequence.

References (11)

Core 11
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10985
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26725
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:030
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28658
Issue Tracking x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=384761
Patch vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-1068.html
Patch vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-1059.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28041
Various Sources x_refsource_confirm
http://www.pcre.org/changelog.txt

Scores

EPSS 0.0160
EPSS Percentile 73.0%

Details

CWE
CWE-20
Status published
Products (50)
perl/pcre 0.91
perl/pcre 0.92
perl/pcre 0.93
perl/pcre 0.94
perl/pcre 0.95
perl/pcre 0.96
perl/pcre 0.97
perl/pcre 0.98
perl/pcre 0.99
perl/pcre 1.00
... and 40 more
Published Dec 03, 2007
Tracked Since Feb 18, 2026