[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <CAJ_zFk+BcOcyt26okYQOEcMN0xo6QNY1N7B3TBeqrybWneaCOQ@mail.gmail.com>
Date: Wed, 3 Jun 2015 13:39:25 -0700
From: Tavis Ormandy <taviso@...gle.com>
To: oss-security@...ts.openwall.com
Subject: Re: Re: Re: CVE-2015-3217: PCRE Library Call Stack
Overflow Vulnerability in match()
On Wed, Jun 3, 2015 at 9:39 AM, Hhjack <82100840@...com> wrote:
> As far as I tested, 8.33, 8.34, 8.35, 8.36, 8.37 were confirmed to be affected.
> PCRE2 10.10 is also confirmed to be vulnerable.
> Other version may also be affected.
>
>
> Cheers,
> Wen
I don't know if it's fair to call this a PCRE bug, isn't it PHP
misusing the API?
Tavis.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
