The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1132 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is     binary-compatible with MySQL. MariaDB uses PCRE, a Perl-compatible regular expression library, to     implement regular expression support in SQL queries.

    Security Fix(es):

    * It was found that the MariaDB client library did not properly check host names against server identities     noted in the X.509 certificates when establishing secure connections using TLS/SSL. A man-in-the-middle     attacker could possibly use this flaw to impersonate a server to a client. (CVE-2016-2047)

    * This update fixes several vulnerabilities in the MariaDB database server. Information about these flaws     can be found on the Oracle Critical Patch Update Advisory page, listed in the References section.
    (CVE-2015-4792, CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830,     CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4870, CVE-2015-4879, CVE-2015-4895, CVE-2015-4913,     CVE-2016-0505, CVE-2016-0546, CVE-2016-0596, CVE-2016-0597, CVE-2016-0598, CVE-2016-0600, CVE-2016-0606,     CVE-2016-0608, CVE-2016-0609, CVE-2016-0610, CVE-2016-0616, CVE-2016-0640, CVE-2016-0641, CVE-2016-0642,     CVE-2016-0643, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647, CVE-2016-0648, CVE-2016-0649, CVE-2016-0650,     CVE-2016-0651, CVE-2016-0655, CVE-2016-0666, CVE-2016-0668)

    * Multiple flaws were found in the way PCRE handled malformed regular expressions. An attacker able to     make MariaDB execute an SQL query with a specially crafted regular expression could use these flaws to     cause it to crash or, possibly, execute arbitrary code. (CVE-2015-3210, CVE-2015-3217, CVE-2015-5073,     CVE-2015-8381, CVE-2015-8383, CVE-2015-8384, CVE-2015-8385, CVE-2015-8386, CVE-2015-8388, CVE-2015-8391,     CVE-2015-8392, CVE-2015-8395, CVE-2016-1283, CVE-2016-3191)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the pcre packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/     pattern and related patterns with certain recursion,     which allows remote attackers to cause a denial of     service (segmentation fault) or possibly have     unspecified other impact via a crafted regular     expression, as demonstrated by a JavaScript RegExp     object encountered by Konqueror.(CVE-2015-2328)

  - PCRE before 8.38 mishandles the : and \\\\ substrings     in character classes, which allows remote attackers to     cause a denial of service (uninitialized memory read)     or possibly have unspecified other impact via a crafted     regular expression, as demonstrated by a JavaScript     RegExp object encountered by Konqueror.(CVE-2015-8390)

  - Heap-based buffer overflow in the find_fixedlength     function in pcre_compile.c in PCRE before 8.38 allows     remote attackers to cause a denial of service (crash)     or obtain sensitive information from heap memory and     possibly bypass the ASLR protection mechanism via a     crafted regular expression with an excess closing     parenthesis.(CVE-2015-5073)

  - PCRE before 8.38 mishandles (?123) subroutine calls and     related subroutine calls, which allows remote attackers     to cause a denial of service (integer overflow) or     possibly have unspecified other impact via a crafted     regular expression, as demonstrated by a JavaScript     RegExp object encountered by Konqueror.(CVE-2015-8387)

  - The pcre_exec function in pcre_exec.c in PCRE before     8.38 mishandles a // pattern with a \\01 string, which     allows remote attackers to cause a denial of service     (heap-based buffer overflow) or possibly have     unspecified other impact via a crafted regular     expression, as demonstrated by a JavaScript RegExp     object encountered by Konqueror.(CVE-2015-8380)

  - The compile_branch function in pcre_compile.c in PCRE     8.x before 8.39 and pcre2_compile.c in PCRE2 before     10.22 mishandles patterns containing an (*ACCEPT)     substring in conjunction with nested parentheses, which     allows remote attackers to execute arbitrary code or     cause a denial of service (stack-based buffer overflow)     via a crafted regular expression, as demonstrated by a     JavaScript RegExp object encountered by Konqueror, aka     ZDI-CAN-3542.(CVE-2016-3191)

  - The pcre_compile function in pcre_compile.c in PCRE     before 8.38 mishandles certain : nesting, which allows     remote attackers to cause a denial of service (CPU     consumption) or possibly have unspecified other impact     via a crafted regular expression, as demonstrated by a     JavaScript RegExp object encountered by     Konqueror.(CVE-2015-8391)

  - PCRE before 8.36 mishandles the     /(((a\\2)|(a*)\\gi1/4oe-1i1/4z))*/ pattern and related     patterns with certain internal recursive back     references, which allows remote attackers to cause a     denial of service (segmentation fault) or possibly have     unspecified other impact via a crafted regular     expression, as demonstrated by a JavaScript RegExp     object encountered by Konqueror.(CVE-2015-2327)

  - PCRE before 8.38 mishandles the (?(i1/4oedigitsi1/4z) and     (?(Ri1/4oedigitsi1/4z) conditions, which allows remote     attackers to cause a denial of service (integer     overflow) or possibly have unspecified other impact via     a crafted regular expression, as demonstrated by a     JavaScript RegExp object encountered by     Konqueror.(CVE-2015-8394)

  - PCRE before 8.38 mishandles the     /(?=di(?i1/4oe=(?1))|(?=(.))))/ pattern and related     patterns with an unmatched closing parenthesis, which     allows remote attackers to cause a denial of service     (buffer overflow) or possibly have unspecified other     impact via a crafted regular expression, as     demonstrated by a JavaScript RegExp object encountered     by Konqueror.(CVE-2015-8388)

  - PCRE before 8.38 mishandles the interaction of     lookbehind assertions and mutually recursive     subpatterns, which allows remote attackers to cause a     denial of service (buffer overflow) or possibly have     unspecified other impact via a crafted regular     expression, as demonstrated by a JavaScript RegExp     object encountered by Konqueror.(CVE-2015-8386)

  - PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10     mishandle group empty matches, which might allow remote     attackers to cause a denial of service (stack-based     buffer overflow) via a crafted regular expression, as     demonstrated by     /^(?:(?(1)\\\\.|(^\\\\\\\\W_)?)+)+$/.(CVE-2015-3217)

  - PCRE before 8.38 mishandles the /(?|(\\k'Pm')|(?'Pm'))/     pattern and related patterns with certain forward     references, which allows remote attackers to cause a     denial of service (buffer overflow) or possibly have     unspecified other impact via a crafted regular     expression, as demonstrated by a JavaScript RegExp     object encountered by Konqueror.(CVE-2015-8385)

  - A flaw was found in the way PCRE handled certain     malformed regular expressions. This issue could cause     an application (for example, Konqueror) linked against     PCRE to crash while parsing malicious regular     expressions.(CVE-2014-8964)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for pcre to version 8.39 (bsc#972127) fixes several issues. If you use pcre extensively please be aware that this is an update to a new version. Please make sure that your software works with the updated version. This version fixes a number of vulnerabilities that affect pcre and applications using the libary when accepting untrusted input as regular expressions or as part thereof. Remote attackers could have caused the application to crash, disclose information or potentially execute arbitrary code. These security issues were fixed :

  - CVE-2014-8964: Heap-based buffer overflow in PCRE     allowed remote attackers to cause a denial of service     (crash) or have other unspecified impact via a crafted     regular expression, related to an assertion that allows     zero repeats (bsc#906574).

  - CVE-2015-2325: Heap buffer overflow in compile_branch()     (bsc#924960).

  - CVE-2015-3210: Heap buffer overflow in pcre_compile2() /     compile_regex() (bsc#933288)

  - CVE-2015-3217: PCRE Library Call Stack Overflow     Vulnerability in match() (bsc#933878).

  - CVE-2015-5073: Library Heap Overflow Vulnerability in     find_fixedlength() (bsc#936227).

  - bsc#942865: heap overflow in compile_regex()

  - CVE-2015-8380: The pcre_exec function in pcre_exec.c     mishandled a // pattern with a \01 string, which allowed     remote attackers to cause a denial of service     (heap-based buffer overflow) or possibly have     unspecified other impact via a crafted regular     expression, as demonstrated by a JavaScript RegExp     object encountered by Konqueror (bsc#957566).

  - CVE-2015-2327: PCRE mishandled certain patterns with     internal recursive back references, which allowed remote     attackers to cause a denial of service (segmentation     fault) or possibly have unspecified other impact via a     crafted regular expression, as demonstrated by a     JavaScript RegExp object encountered by Konqueror     (bsc#957567).

  - bsc#957598: Various security issues

  - CVE-2015-8381: Heap Overflow in compile_regex()     (bsc#957598).

  - CVE-2015-8382: Regular Expression Uninitialized Pointer     Information Disclosure Vulnerability     (ZDI-CAN-2547)(bsc#957598).

  - CVE-2015-8383: Buffer overflow caused by repeated     conditional group(bsc#957598).

  - CVE-2015-8384: Buffer overflow caused by recursive back     reference by name within certain group(bsc#957598).

  - CVE-2015-8385: Buffer overflow caused by forward     reference by name to certain group(bsc#957598).

  - CVE-2015-8386: Buffer overflow caused by lookbehind     assertion(bsc#957598).

  - CVE-2015-8387: Integer overflow in subroutine     calls(bsc#957598).

  - CVE-2015-8388: Buffer overflow caused by certain     patterns with an unmatched closing     parenthesis(bsc#957598).

  - CVE-2015-8389: Infinite recursion in JIT compiler when     processing certain patterns(bsc#957598).

  - CVE-2015-8390: Reading from uninitialized memory when     processing certain patterns(bsc#957598).

  - CVE-2015-8391: Some pathological patterns causes     pcre_compile() to run for a very long time(bsc#957598).

  - CVE-2015-8392: Buffer overflow caused by certain     patterns with duplicated named groups(bsc#957598).

  - CVE-2015-8393: Information leak when running pcgrep -q     on crafted binary(bsc#957598).

  - CVE-2015-8394: Integer overflow caused by missing check     for certain conditions(bsc#957598).

  - CVE-2015-8395: Buffer overflow caused by certain     references(bsc#957598).

  - CVE-2015-2328: PCRE mishandled the /((?(R)a|(?1)))+/     pattern and related patterns with certain recursion,     which allowed remote attackers to cause a denial of     service (segmentation fault) or possibly have     unspecified other impact via a crafted regular     expression (bsc#957600).

  - CVE-2016-1283: The pcre_compile2 function in     pcre_compile.c in PCRE mishandled certain patterns with     named subgroups, which allowed remote attackers to cause     a denial of service (heap-based buffer overflow) or     possibly have unspecified other impact via a crafted     regular expression (bsc#960837).

  - CVE-2016-3191: The compile_branch function in     pcre_compile.c in pcre2_compile.c mishandled patterns     containing an (*ACCEPT) substring in conjunction with     nested parentheses, which allowed remote attackers to     execute arbitrary code or cause a denial of service     (stack-based buffer overflow) via a crafted regular     expression (bsc#971741).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
193833	RHEL 6 / 7 : rh-mariadb100-mariadb (RHSA-2016:1132)	Nessus	Red Hat Local Security Checks	2024/4/24	2025/4/15	critical
125102	EulerOS Virtualization 3.0.1.0 : pcre (EulerOS-SA-2019-1558)	Nessus	Huawei Local Security Checks	2019/5/15	2024/5/22	critical
95534	SUSE SLED12 / SLES12 Security Update : pcre (SUSE-SU-2016:2971-1)	Nessus	SuSE Local Security Checks	2016/12/5	2026/1/15	critical
95915	SUSE SLED12 / SLES12 Security Update : pcre (SUSE-SU-2016:3161-1)	Nessus	SuSE Local Security Checks	2016/12/16	2026/1/8	critical

检测

插件搜索

critical

critical

critical

critical