5 - CVE-2014-8964

Executive Summary

Informations
Name	CVE-2014-8964	First vendor Publication	2014-12-16
Vendor	Cve	Last vendor Modification	2022-08-04

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8964

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

Type	Description	Count
Application	Mariadb cpe:2.3:a:mariadb:mariadb:10.0.9:::::::* cpe:2.3:a:mariadb:mariadb:10.0.8:::::::* cpe:2.3:a:mariadb:mariadb:10.0.7:::::::* cpe:2.3:a:mariadb:mariadb:10.0.6:::::::* cpe:2.3:a:mariadb:mariadb:10.0.5:::::::* cpe:2.3:a:mariadb:mariadb:10.0.4:::::::* cpe:2.3:a:mariadb:mariadb:10.0.3:::::::* cpe:2.3:a:mariadb:mariadb:10.0.2:::::::* cpe:2.3:a:mariadb:mariadb:10.0.17:::::::* cpe:2.3:a:mariadb:mariadb:10.0.16:::::::* cpe:2.3:a:mariadb:mariadb:10.0.15:::::::* cpe:2.3:a:mariadb:mariadb:10.0.14:::::::* cpe:2.3:a:mariadb:mariadb:10.0.13:::::::* cpe:2.3:a:mariadb:mariadb:10.0.12:::::::* cpe:2.3:a:mariadb:mariadb:10.0.11:::::::* cpe:2.3:a:mariadb:mariadb:10.0.10:::::::* cpe:2.3:a:mariadb:mariadb:10.0.1:::::::* cpe:2.3:a:mariadb:mariadb:10.0.0:::::::* cpe:2.3:a:mariadb:mariadb:5.5.61:::::::* cpe:2.3:a:mariadb:mariadb:5.5.60:::::::* cpe:2.3:a:mariadb:mariadb:5.5.59:::::::* cpe:2.3:a:mariadb:mariadb:5.5.58:::::::* cpe:2.3:a:mariadb:mariadb:5.5.57:::::::* cpe:2.3:a:mariadb:mariadb:5.5.56:::::::* cpe:2.3:a:mariadb:mariadb:5.5.55:::::::* cpe:2.3:a:mariadb:mariadb:5.5.54:::::::* cpe:2.3:a:mariadb:mariadb:5.5.51:::::::* cpe:2.3:a:mariadb:mariadb:5.5.50:::::::* cpe:2.3:a:mariadb:mariadb:5.5.49:::::::* cpe:2.3:a:mariadb:mariadb:5.5.48:::::::* cpe:2.3:a:mariadb:mariadb:5.5.47:::::::* cpe:2.3:a:mariadb:mariadb:5.5.46:::::::* cpe:2.3:a:mariadb:mariadb:5.5.43:::::::* cpe:2.3:a:mariadb:mariadb:5.5.40:::::::* cpe:2.3:a:mariadb:mariadb:5.5.35:::::::* cpe:2.3:a:mariadb:mariadb:5.5.34:::::::* cpe:2.3:a:mariadb:mariadb:5.5.33:::::::* cpe:2.3:a:mariadb:mariadb:5.5.33:a:::::: cpe:2.3:a:mariadb:mariadb:5.5.29:::::::* cpe:2.3:a:mariadb:mariadb:5.5.28a:::::::* cpe:2.3:a:mariadb:mariadb:5.5.28:::::::* cpe:2.3:a:mariadb:mariadb:5.5.27:::::::* cpe:2.3:a:mariadb:mariadb:5.5.25:::::::* cpe:2.3:a:mariadb:mariadb:5.5.24:::::::* cpe:2.3:a:mariadb:mariadb:5.5.23:::::::* cpe:2.3:a:mariadb:mariadb:5.5.22:::::::* cpe:2.3:a:mariadb:mariadb:5.5.21:::::::* cpe:2.3:a:mariadb:mariadb:5.5.20:::::::* cpe:2.3:a:mariadb:mariadb:5.3.9:::::::* cpe:2.3:a:mariadb:mariadb:5.3.8:::::::* cpe:2.3:a:mariadb:mariadb:5.3.7:::::::* cpe:2.3:a:mariadb:mariadb:5.3.6:::::::* cpe:2.3:a:mariadb:mariadb:5.3.5:::::::* cpe:2.3:a:mariadb:mariadb:5.3.4:::::::* cpe:2.3:a:mariadb:mariadb:5.3.3:::::::* cpe:2.3:a:mariadb:mariadb:5.3.2:::::::* cpe:2.3:a:mariadb:mariadb:5.3.12:::::::* cpe:2.3:a:mariadb:mariadb:5.3.11:::::::* cpe:2.3:a:mariadb:mariadb:5.3.10:::::::* cpe:2.3:a:mariadb:mariadb:5.3.1:::::::* cpe:2.3:a:mariadb:mariadb:5.3.0:::::::* cpe:2.3:a:mariadb:mariadb:5.2.9:::::::* cpe:2.3:a:mariadb:mariadb:5.2.8:::::::* cpe:2.3:a:mariadb:mariadb:5.2.7:::::::* cpe:2.3:a:mariadb:mariadb:5.2.6:::::::* cpe:2.3:a:mariadb:mariadb:5.2.5:::::::* cpe:2.3:a:mariadb:mariadb:5.2.4:::::::* cpe:2.3:a:mariadb:mariadb:5.2.3:::::::* cpe:2.3:a:mariadb:mariadb:5.2.2:::::::* cpe:2.3:a:mariadb:mariadb:5.2.14:::::::* cpe:2.3:a:mariadb:mariadb:5.2.13:::::::* cpe:2.3:a:mariadb:mariadb:5.2.12:::::::* cpe:2.3:a:mariadb:mariadb:5.2.11:::::::* cpe:2.3:a:mariadb:mariadb:5.2.10:::::::* cpe:2.3:a:mariadb:mariadb:5.2.1:::::::* cpe:2.3:a:mariadb:mariadb:5.2.0:::::::* cpe:2.3:a:mariadb:mariadb:5.1.67:::::::* cpe:2.3:a:mariadb:mariadb:5.1.66:::::::* cpe:2.3:a:mariadb:mariadb:5.1.62:::::::* cpe:2.3:a:mariadb:mariadb:5.1.61:::::::* cpe:2.3:a:mariadb:mariadb:5.1.60:::::::* cpe:2.3:a:mariadb:mariadb:5.1.55:::::::* cpe:2.3:a:mariadb:mariadb:5.1.53:::::::* cpe:2.3:a:mariadb:mariadb:5.1.51:::::::* cpe:2.3:a:mariadb:mariadb:5.1.50:::::::* cpe:2.3:a:mariadb:mariadb:5.1.49:::::::* cpe:2.3:a:mariadb:mariadb:5.1.47:::::::* cpe:2.3:a:mariadb:mariadb:5.1.44:::::::* cpe:2.3:a:mariadb:mariadb:5.1.42:::::::* cpe:2.3:a:mariadb:mariadb:5.1.41:::::::* cpe:2.3:a:mariadb:mariadb:2.13.0:::::node.js:: cpe:2.3:a:mariadb:mariadb:::::::: cpe:2.3:a:mariadb:mariadb::r1::::::* cpe:2.3:a:mariadb:mariadb::::::node.js::*	94
Application	Pcre cpe:2.3:a:pcre:pcre:8.36:::::::* cpe:2.3:a:pcre:pcre:8.35:::::::* cpe:2.3:a:pcre:pcre:8.34:::::::* cpe:2.3:a:pcre:pcre:8.33:::::::* cpe:2.3:a:pcre:pcre:8.32:::::::* cpe:2.3:a:pcre:pcre:8.31:::::::* cpe:2.3:a:pcre:pcre:8.30:::::::* cpe:2.3:a:pcre:pcre:8.21:::::::* cpe:2.3:a:pcre:pcre:8.20:::::::* cpe:2.3:a:pcre:pcre:8.13:::::::* cpe:2.3:a:pcre:pcre:8.12:::::::* cpe:2.3:a:pcre:pcre:8.11:::::::* cpe:2.3:a:pcre:pcre:8.10:::::::* cpe:2.3:a:pcre:pcre:8.02:::::::* cpe:2.3:a:pcre:pcre:8.01:::::::* cpe:2.3:a:pcre:pcre:8.00:::::::* cpe:2.3:a:pcre:pcre:7.8:::::::* cpe:2.3:a:pcre:pcre:7.7:::::::* cpe:2.3:a:pcre:pcre:6.1:::::::* cpe:2.3:a:pcre:pcre:6.0:::::::* cpe:2.3:a:pcre:pcre:5.0:::::::* cpe:2.3:a:pcre:pcre::::::::	22
Os	Fedoraproject Fedora cpe:2.3:o:fedoraproject:fedora:21:::::::* cpe:2.3:o:fedoraproject:fedora:20:::::::* cpe:2.3:o:fedoraproject:fedora:19:::::::*	3
Os	Opensuse cpe:2.3:o:opensuse:opensuse:13.2:::::::* cpe:2.3:o:opensuse:opensuse:13.1:::::::*	2
Os	Oracle Solaris cpe:2.3:o:oracle:solaris:11.2:::::::*	1
Os	Redhat Enterprise Linux Desktop cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::*	1
Os	Redhat Enterprise Linux Eus cpe:2.3:o:redhat:enterprise_linux_eus:7.7:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:7.6:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:7.5:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:7.4:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:7.3:::::::*	5
Os	Redhat Enterprise Linux Server cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::*	1
Os	Redhat Enterprise Linux Server Aus cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:::::::* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:::::::* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:::::::* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:::::::*	4
Os	Redhat Enterprise Linux Server Tus cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:::::::* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:::::::* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:::::::*	3
Os	Redhat Enterprise Linux Workstation cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::*	1

Nessus® Vulnerability Scanner

Date	Description
2016-12-16	Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-3161-1.nasl - Type : ACT_GATHER_INFO
2016-12-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-1448.nasl - Type : ACT_GATHER_INFO
2016-12-05	Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2971-1.nasl - Type : ACT_GATHER_INFO
2016-07-11	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201607-02.nasl - Type : ACT_GATHER_INFO
2015-07-30	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2694-1.nasl - Type : ACT_GATHER_INFO
2015-07-22	Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2015-1273-1.nasl - Type : ACT_GATHER_INFO
2015-07-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2015-479.nasl - Type : ACT_GATHER_INFO
2015-05-29	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2015-528.nasl - Type : ACT_GATHER_INFO
2015-05-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2015-353.nasl - Type : ACT_GATHER_INFO
2015-03-30	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2015-137.nasl - Type : ACT_GATHER_INFO
2015-03-26	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20150305_pcre_on_SL7_x.nasl - Type : ACT_GATHER_INFO
2015-03-18	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2015-0330.nasl - Type : ACT_GATHER_INFO
2015-03-10	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2015-0330.nasl - Type : ACT_GATHER_INFO
2015-03-05	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2015-0330.nasl - Type : ACT_GATHER_INFO
2015-01-06	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2015-002.nasl - Type : ACT_GATHER_INFO
2015-01-06	Name : The remote Fedora host is missing a security update. File : fedora_2014-17642.nasl - Type : ACT_GATHER_INFO
2015-01-06	Name : The remote Fedora host is missing a security update. File : fedora_2014-17626.nasl - Type : ACT_GATHER_INFO
2015-01-06	Name : The remote Fedora host is missing a security update. File : fedora_2014-17624.nasl - Type : ACT_GATHER_INFO
2014-12-22	Name : The remote Fedora host is missing a security update. File : fedora_2014-16224.nasl - Type : ACT_GATHER_INFO
2014-12-22	Name : The remote Fedora host is missing a security update. File : fedora_2014-16215.nasl - Type : ACT_GATHER_INFO
2014-12-15	Name : The remote Fedora host is missing a security update. File : fedora_2014-15573.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/71206
CONFIRM	http://advisories.mageia.org/MGASA-2014-0534.html http://bugs.exim.org/show_bug.cgi?id=1546 http://www.exim.org/viewvc/pcre?view=revision&revision=1513 http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html https://bugzilla.redhat.com/show_bug.cgi?id=1166147
FEDORA	http://lists.fedoraproject.org/pipermail/package-announce/2014-December/14584... http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147474... http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147511... http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147516...
GENTOO	https://security.gentoo.org/glsa/201607-02
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2015:002 http://www.mandriva.com/security/advisories?name=MDVSA-2015:137
MLIST	http://www.openwall.com/lists/oss-security/2014/11/21/6
REDHAT	http://rhn.redhat.com/errata/RHSA-2015-0330.html
SUSE	http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html

Alert History

If you want to see full details history, please login or register.

Date	Informations
2022-08-05 00:27:50	Multiple Updates
2021-05-05 01:16:17	Multiple Updates
2021-04-22 01:42:40	Multiple Updates
2020-05-23 01:53:46	Multiple Updates
2020-05-23 00:42:52	Multiple Updates
2017-07-01 09:23:12	Multiple Updates
2016-12-17 13:23:50	Multiple Updates
2016-12-14 13:26:32	Multiple Updates
2016-12-06 13:26:15	Multiple Updates
2016-11-29 00:24:57	Multiple Updates
2016-10-18 12:04:08	Multiple Updates
2016-07-12 13:26:01	Multiple Updates
2016-04-27 01:29:21	Multiple Updates
2015-07-31 13:28:46	Multiple Updates
2015-07-24 13:29:15	Multiple Updates
2015-07-18 13:28:24	Multiple Updates
2015-06-04 09:27:07	Multiple Updates
2015-05-30 13:27:35	Multiple Updates
2015-05-14 13:28:08	Multiple Updates
2015-04-18 09:26:35	Multiple Updates
2015-04-03 09:26:57	Multiple Updates
2015-04-02 21:27:39	Multiple Updates
2015-03-31 13:29:02	Multiple Updates
2015-03-28 09:26:18	Multiple Updates
2015-03-27 13:28:47	Multiple Updates
2015-03-19 13:28:14	Multiple Updates
2015-03-12 09:24:18	Multiple Updates
2015-03-11 13:24:57	Multiple Updates
2015-03-06 13:25:55	Multiple Updates
2015-01-07 13:26:29	Multiple Updates
2014-12-23 13:26:41	Multiple Updates
2014-12-18 00:23:33	Multiple Updates
2014-12-16 21:24:53	First insertion

Global Informations

Type	Count
CWE ID(s)	1
CPE ID(s)	137
Sources(s)	16
Nessus® Exploit(s)	21

	Related
9	GLSA-201607-02
7.5	USN-2694-1
5	RHSA-2015:0330
5	MDVSA-2015:137
5	MDVSA-2015:002
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 5 more Alert(s)

5 - CVE-2014-8964

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

CPE : Common Platform Enumeration

Nessus® Vulnerability Scanner

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU