20Eki
Execution error – PCRE limits exceeded
I have problem when implementing modsecurity and crs. Here is the issue, I hope anyone can give us some guide for resolving this issue.
Apache version :
Server version: Apache/2.4.29 (Ubuntu) Server built:
2022-06-23T12:51:37
ModSecurity version :
modsecurity-2.9.6 (compiled from source)
Error :
[id "-"][file "/etc/apache2/modsecurity.d/owasp-crs/rules/RESPONSE-951-DATA-LEAKAGES-SQL.conf"][line "92"] - Execution error - PCRE limits exceeded (-8): (null).
[id "-"][file "/etc/apache2/modsecurity.d/owasp-crs/rules/RESPONSE-951-DATA-LEAKAGES-SQL.conf"][line "249"] - Execution error - PCRE limits exceeded (-8): (null).
[id "-"][file "/etc/apache2/modsecurity.d/owasp-crs/rules/RESPONSE-951-DATA-LEAKAGES-SQL.conf"][line "276"] - Execution error - PCRE limits exceeded (-8): (null).
[id "-"][file "/etc/apache2/modsecurity.d/owasp-crs/rules/RESPONSE-951-DATA-LEAKAGES-SQL.conf"][line "329"] - Execution error - PCRE limits exceeded (-8): (null).
[id "-"][file "/etc/apache2/modsecurity.d/owasp-crs/rules/RESPONSE-951-DATA-LEAKAGES-SQL.conf"][line "355"] - Execution error - PCRE limits exceeded (-8): (null).
[id "-"][file "/etc/apache2/modsecurity.d/owasp-crs/rules/RESPONSE-951-DATA-LEAKAGES-SQL.conf"][line "381"] - Execution error - PCRE limits exceeded (-8): (null).
[id "-"][file "/etc/apache2/modsecurity.d/owasp-crs/rules/RESPONSE-951-DATA-LEAKAGES-SQL.conf"][line "407"] - Execution error - PCRE limits exceeded (-8): (null).
[id "-"][file "/etc/apache2/modsecurity.d/owasp-crs/rules/RESPONSE-951-DATA-LEAKAGES-SQL.conf"][line "433"] - Execution error - PCRE limits exceeded (-8): (null).
[id "-"][file "/etc/apache2/modsecurity.d/owasp-crs/rules/RESPONSE-951-DATA-LEAKAGES-SQL.conf"][line "459"]
Thing What I have done :
Set this value (tested before or after load crs.conf):
SecPcreMatchLimit 5000000
SecPcreMatchLimitRecursion 5000000
Add in php.ini
pcre.backtrack_limit=1000000
pcre.recursion_limit=1000000
restart php-fpm and apache2
And no luck!, the issue still persist.
Any ideas how to fix this.
Thank you.