int(3566)

Boletines de Vulnerabilidades

Múltiples vulnerabilidades en Perl-Compatible Regular Expression

Clasificación de la vulnerabilidad
Propiedad Valor
Nivel de Confianza Oficial
Impacto Obtener acceso
Dificultad Experto
Requerimientos del atacante Acceso remoto sin cuenta a un servicio estandar

Información sobre el sistema
Propiedad Valor
Fabricante afectado GNU/Linux
Software afectado Perl-Compatible Regular Expression < 7.3
Kazehakase

Descripción
Se han encontrado múltiples vulnerabilidades en Perl-Compatible Regular Expression. Las vulnerabilidades son descritas a continuación.

- CVE-2007-1661: Se ha encontrado una vulnerabilidad en la librería Perl-Compatible Regular Expression en las versiones anteriores a la 7.3. La vulnerabilidad se da cuando se comparan ciertas entradas de bytes contra patrones regex en modo no-UTF 8. Un atacante remoto podría obtener información sensible o causar una denegación de servicio.

- CVE-2007-1662: Se ha encontrado una vulnerabilidad en la librería Perl-Compatible Regular Expression en las versiones anteriores a la 7.3. La vulnerabilidad reside al leer pasado el final del string cuando se están buscando corchetes y paréntesis sin cerrar. Un atacante remoto podría causar una denegación de servicio.

- CVE-2007-4766: Se han encontrado múltiples vulnerabilidades del tipo desbordamiento de entero en Perl-Compatible Regular Expression en las versiones anteriores a la 7.3. Las vulnerabilidades residen en un error no especificado. Un atacante remoto podría causar una denegación de servicio o ejecutar código arbitrario mediante secuencias de escape no especificadas.

- CVE-2007-4767: Se ha encontrado una vulnerabilidad en la librería Perl-Compatible Regular Expression en las versiones anteriores a la 7.3. La vulnerabilidad reside al no computar de forma correcta la longitud de secuencias \p, secuencias \P o secuencias \P{x}. Un atacante remoto podría causar una denegación de servicio o ejecutar código arbitrario.

- CVE-2007-4768: Se ha encontrado una vulnerabilidad del tipo desbordamiento de búfer en la librería Perl-Compatible Regular Expression en las versiones anteriores a la 7.3. La vulnerabilidad reside en un error no especificado. Un atacante remoto podría ejecutar código arbitrario mediante una secuencia de singleton Unicode en una clase carácter en un patrón regex.

Solución


Actualización de software

Debian (DSA 1399-1)

Debian Linux 3.1
Source
http://security.debian.org/pool/updates/main/p/pcre3/pcre3_4.5+7.4-1.dsc
http://security.debian.org/pool/updates/main/p/pcre3/pcre3_4.5+7.4-1.diff.gz
http://security.debian.org/pool/updates/main/p/pcre3/pcre3_4.5+7.4.orig.tar.gz
Architecture independent
http://security.debian.org/pool/updates/main/p/pcre3/pgrep_4.5+7.4-1_all.deb
alpha
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_4.5+7.4-1_alpha.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_4.5+7.4-1_alpha.deb
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_4.5+7.4-1_alpha.deb
arm
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_4.5+7.4-1_arm.deb
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_4.5+7.4-1_arm.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_4.5+7.4-1_arm.deb
hppa
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_4.5+7.4-1_hppa.deb
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_4.5+7.4-1_hppa.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_4.5+7.4-1_hppa.deb
i386
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_4.5+7.4-1_i386.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_4.5+7.4-1_i386.deb
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_4.5+7.4-1_i386.deb
ia64
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_4.5+7.4-1_ia64.deb
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_4.5+7.4-1_ia64.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_4.5+7.4-1_ia64.deb
m68k
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_4.5+7.4-1_m68k.deb
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_4.5+7.4-1_m68k.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_4.5+7.4-1_m68k.deb
mips
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_4.5+7.4-1_mips.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_4.5+7.4-1_mips.deb
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_4.5+7.4-1_mips.deb
mipsel
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_4.5+7.4-1_mipsel.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_4.5+7.4-1_mipsel.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_4.5+7.4-1_mipsel.deb
powerpc
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_4.5+7.4-1_powerpc.deb
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_4.5+7.4-1_powerpc.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_4.5+7.4-1_powerpc.deb
s390
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_4.5+7.4-1_s390.deb
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_4.5+7.4-1_s390.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_4.5+7.4-1_s390.deb
sparc
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_4.5+7.4-1_sparc.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_4.5+7.4-1_sparc.deb
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_4.5+7.4-1_sparc.deb

Debian Linux 4.0
Source
http://security.debian.org/pool/updates/main/p/pcre3/pcre3_6.7+7.4-2.diff.gz
http://security.debian.org/pool/updates/main/p/pcre3/pcre3_6.7+7.4-2.dsc
http://security.debian.org/pool/updates/main/p/pcre3/pcre3_6.7+7.4.orig.tar.gz
alpha
http://security.debian.org/pool/updates/main/p/pcre3/libpcrecpp0_6.7+7.4-2_alpha.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_6.7+7.4-2_alpha.deb
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_6.7+7.4-2_alpha.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_6.7+7.4-2_alpha.deb
amd64
http://security.debian.org/pool/updates/main/p/pcre3/libpcrecpp0_6.7+7.4-2_amd64.deb
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_6.7+7.4-2_amd64.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_6.7+7.4-2_amd64.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_6.7+7.4-2_amd64.deb
arm
http://security.debian.org/pool/updates/main/p/pcre3/libpcrecpp0_6.7+7.4-2_arm.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_6.7+7.4-2_arm.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_6.7+7.4-2_arm.deb
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_6.7+7.4-2_arm.deb
hppa
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_6.7+7.4-2_hppa.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcrecpp0_6.7+7.4-2_hppa.deb
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_6.7+7.4-2_hppa.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_6.7+7.4-2_hppa.deb
i386
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_6.7+7.4-2_i386.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcrecpp0_6.7+7.4-2_i386.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_6.7+7.4-2_i386.deb
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_6.7+7.4-2_i386.deb
ia64
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_6.7+7.4-2_ia64.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_6.7+7.4-2_ia64.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcrecpp0_6.7+7.4-2_ia64.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_6.7+7.4-2_ia64.deb
mips
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_6.7+7.4-2_mips.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_6.7+7.4-2_mips.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_6.7+7.4-2_mips.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcrecpp0_6.7+7.4-2_mips.deb
mipsel
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_6.7+7.4-2_mipsel.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcrecpp0_6.7+7.4-2_mipsel.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_6.7+7.4-2_mipsel.deb
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_6.7+7.4-2_mipsel.deb
powerpc
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_6.7+7.4-2_powerpc.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_6.7+7.4-2_powerpc.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_6.7+7.4-2_powerpc.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcrecpp0_6.7+7.4-2_powerpc.deb
s390
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_6.7+7.4-2_s390.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_6.7+7.4-2_s390.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcrecpp0_6.7+7.4-2_s390.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_6.7+7.4-2_s390.deb
sparc
http://security.debian.org/pool/updates/main/p/pcre3/pcregrep_6.7+7.4-2_sparc.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3_6.7+7.4-2_sparc.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcre3-dev_6.7+7.4-2_sparc.deb
http://security.debian.org/pool/updates/main/p/pcre3/libpcrecpp0_6.7+7.4-2_sparc.deb

Debian (DSA-1570-1)

Debian Linux 4.0
Source
http://security.debian.org/pool/updates/main/k/kazehakase/kazehakase_0.4.2-1etch1.diff.gz
http://security.debian.org/pool/updates/main/k/kazehakase/kazehakase_0.4.2.orig.tar.gz
http://security.debian.org/pool/updates/main/k/kazehakase/kazehakase_0.4.2-1etch1.dsc
alpha (DEC Alpha)
http://security.debian.org/pool/updates/main/k/kazehakase/kazehakase_0.4.2-1etch1_alpha.deb
amd64 (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/k/kazehakase/kazehakase_0.4.2-1etch1_amd64.deb
arm (ARM)
http://security.debian.org/pool/updates/main/k/kazehakase/kazehakase_0.4.2-1etch1_arm.deb
hppa (HP PA RISC)
http://security.debian.org/pool/updates/main/k/kazehakase/kazehakase_0.4.2-1etch1_hppa.deb
i386 (Intel ia32)
http://security.debian.org/pool/updates/main/k/kazehakase/kazehakase_0.4.2-1etch1_i386.deb
mips (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/k/kazehakase/kazehakase_0.4.2-1etch1_mips.deb
mipsel (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/k/kazehakase/kazehakase_0.4.2-1etch1_mipsel.deb
powerpc (PowerPC)
http://security.debian.org/pool/updates/main/k/kazehakase/kazehakase_0.4.2-1etch1_powerpc.deb
s390 (IBM S/390)
http://security.debian.org/pool/updates/main/k/kazehakase/kazehakase_0.4.2-1etch1_s390.deb
sparc (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/k/kazehakase/kazehakase_0.4.2-1etch1_sparc.deb

Mandriva (MDKSA-2007:211)

Mandriva Linux 2007.1
X86
2007.1/i586/libpcre-devel-7.3-0.1mdv2007.1.i586.rpm
2007.1/i586/libpcre0-7.3-0.1mdv2007.1.i586.rpm
2007.1/i586/pcre-7.3-0.1mdv2007.1.i586.rpm
2007.1/SRPMS/pcre-7.3-0.1mdv2007.1.src.rpm
X86_64
2007.1/x86_64/lib64pcre-devel-7.3-0.1mdv2007.1.x86_64.rpm
2007.1/x86_64/lib64pcre0-7.3-0.1mdv2007.1.x86_64.rpm
2007.1/x86_64/pcre-7.3-0.1mdv2007.1.x86_64.rpm
2007.1/SRPMS/pcre-7.3-0.1mdv2007.1.src.rpm

Suse Linux
Las actualizaciones pueden descargarse mediante YAST o del servidor FTP oficial de Suse Linux.

Apple
Security Update 2007-009 / Mac OS X 10.4.11 (Universal)
http://www.apple.com/support/downloads/securityupdate200700910411universal.html
Security Update 2007-009 / Max OS X 10.4.11 (PPC)
http://www.apple.com/support/downloads/securityupdate200700910411ppc.html
Security Update 2007-009 / Max OS X 10.5.1
http://www.apple.com/support/downloads/securityupdate20070091051.html

Adobe
Adobe Flash Player 9.0.48.0 (Win, Mac, Linux) - Actualizar a 9.0.115.0
http://www.adobe.com/shockwave/download/download.cgi?P1_Prod_Version=ShockwaveFlash
Adobe Flash Player 9.0.47.0 (Solaris)
http://labs.adobe.com/
Adobe Flash Player < 9 - Flash Player 7 version parcheada
http://kb.adobe.com/selfservice/viewContent.do?externalId=d9c2fe33&sliceId=2

Sun (238305)
Flash Player 9.0 r47 para Solaris
Solaris 10 / SPARC / patch 125332-03
Solaris 10 / x86 / patch 125333-03
OpenSolaris / build snv_89
http://sunsolve.sun.com/pub-cgi/show.pl?target=patchpage

Sun (239286)
Solaris 10 / SPARC / patch 121136-02 (Adobe Reader Plugin) y patch 121104-03 (Adobe Reader)
http://sunsolve.sun.com/pub-cgi/show.pl?target=patchpage

Identificadores estándar
Propiedad Valor
CVE CVE-2007-1661
CVE-2007-1662
CVE-2007-4766
CVE-2007-4767
CVE-2007-4768
BID

Recursos adicionales
Debian Security Advisory (DSA 1399-1)
http://lists.debian.org/debian-security-announce/debian-security-announce-2007/msg00177.html

Debian Security Advisory (DSA-1570-1)
http://lists.debian.org/debian-security-announce/2008/msg00146.html

Mandriva Security Advisory (MDKSA-2007:211)
http://www.mandriva.com/security/advisories?name=MDKSA-2007:211

SUSE Security Advisory (SUSE-SA:2007:062)
http://www.novell.com/linux/security/advisories/2007_62_pcre.html

Apple Security Update (307179)
http://docs.info.apple.com/article.html?artnum=307179

Adobe Security Bulletin (APSB07-20)
http://www.adobe.com/support/security/bulletins/apsb07-20.html

Sun Alert Notification (238305)
http://sunsolve.sun.com/search/document.do?assetkey=1-66-238305-1

Sun Alert Notification (239286)
http://sunsolve.sun.com/search/document.do?assetkey=1-66-239286-1

Histórico de versiones
Versión Comentario Fecha
1.0 Aviso emitido 2007-11-09
1.1 Aviso emitido por Mandriva (MDKSA-2007:211) 2007-11-15
1.2 Aviso emitido por Suse (SUSE-SA:2007:062) 2007-11-28
1.3 Aviso emitido por Apple (307179) 2007-12-21
1.4 Aviso emitido por Adobe (APSB07-20) 2007-12-28
1.5 Aviso emitido por Debian (DSA-1570-1) 2008-05-13
1.6 Aviso emitido por Sun (238305) 2008-06-05
1.7 Aviso emitido por Sun (239286) 2008-06-27
1.8 Aviso actualizado por Sun (239286) 2008-08-04

Miembros de

CERT
FIRST
TF-CSIRT
EGC Group
UE
Red Nacional de SOC
Foro Nacional de Ciberseguridad
CSIRT.es
Ministerio de Defensa
CNI
CNI
CCN-CERT
CNI
CNI