CVE-2016-9643
Gentoo Linux Security Advisory 201706-15
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory consumption) as demonstrated in a large number of ($ (open parenthesis and dollar) followed by {-2,16} and a large number of +) (plus close parenthesis).
El código regex en Webkit 2.4.11 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) como se demuestra en un gran número de ($ (abrir paréntesis y dólar) seguido de {-2,16} y un gran número de +) (suma cerrar paréntesis).
A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2016-11-26 CVE Reserved
- 2017-03-07 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-400: Uncontrolled Resource Consumption
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2016/11/26/2 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2016/11/26/5 | Mailing List |
|
| http://www.securityfocus.com/bid/94559 | Vdb Entry | |
| http://www.securitytracker.com/id/1038137 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://security.gentoo.org/glsa/201706-15 | 2017-07-12 |