Логотип exploitDog
bind: "CVE-2025-58050"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2025-58050"

Количество 6

Количество 6

ubuntu логотип

CVE-2025-58050

около 2 месяцев назад

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.

CVSS3: 9.1
EPSS: Низкий
redhat логотип

CVE-2025-58050

около 2 месяцев назад

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2025-58050

около 2 месяцев назад

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.

CVSS3: 9.1
EPSS: Низкий
debian логотип

CVE-2025-58050

около 2 месяцев назад

The PCRE2 library is a set of C functions that implement regular expre ...

CVSS3: 9.1
EPSS: Низкий
redos логотип

ROS-20251001-06

15 дней назад

Уязвимость pcre2

CVSS3: 9.1
EPSS: Низкий
fstec логотип

BDU:2025-12592

около 2 месяцев назад

Уязвимость библиотеки регулярных выражений PCRE2, связанная с чтением за границами буфера в памяти, позволяющая нарушителю получить доступ к конфиденциальной информации

CVSS3: 9.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-58050

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.

CVSS3: 9.1
0%
Низкий
около 2 месяцев назад
redhat логотип
CVE-2025-58050

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.

CVSS3: 6.5
0%
Низкий
около 2 месяцев назад
nvd логотип
CVE-2025-58050

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.

CVSS3: 9.1
0%
Низкий
около 2 месяцев назад
debian логотип
CVE-2025-58050

The PCRE2 library is a set of C functions that implement regular expre ...

CVSS3: 9.1
0%
Низкий
около 2 месяцев назад
redos логотип
ROS-20251001-06

Уязвимость pcre2

CVSS3: 9.1
0%
Низкий
15 дней назад
fstec логотип
BDU:2025-12592

Уязвимость библиотеки регулярных выражений PCRE2, связанная с чтением за границами буфера в памяти, позволяющая нарушителю получить доступ к конфиденциальной информации

CVSS3: 9.1
0%
Низкий
около 2 месяцев назад

Уязвимостей на страницу