Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pcre | Aug 30, 2017 | Dec 16, 2014 |
| Debian | — | Upgrade pcre3 | Jul 30, 2024 | Dec 16, 2014 |
| Gentoo Linux | — | Upgrade dev-libs/libpcre. | Oct 30, 2017 | Dec 16, 2014 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Dec 16, 2014 |
| Oracle Solaris | — | Upgrade library/pcre to version 8.37-0.175.2.13.0.3.0 on Solaris 11.2 | May 29, 2017 | Dec 16, 2014 |
| Oracle_linux | — | Upgrade pcre-toolsUpgrade pcreUpgrade pcre-staticUpgrade pcre-devel | Oct 16, 2024 | Dec 16, 2014 |
| Suse | — | Upgrade libpcrecpp0Upgrade mariadb-toolsUpgrade libpcre16-0Upgrade mariadbUpgrade mariadb-errormessagesUpgrade libpcre1Upgrade mariadb-clientUpgrade pcre-toolsUpgrade libpcre2-8-0Upgrade pcre2-develUpgrade libpcre2-16-0Upgrade libmysqlclient-develUpgrade sles12-docker-imageUpgrade libpcre1-32bitUpgrade libmysqlclient_r18Upgrade libmysqlclient18Upgrade libpcre2-32-0Upgrade libpcre2-posix2Upgrade libmysqlclient_r18-32bitUpgrade pcre-develUpgrade pcre-devel-staticUpgrade libmysqld18Upgrade mariadb-100-errormessagesUpgrade libpcreposix0Upgrade libpcrecpp0-32bitUpgrade sles12sp1-docker-imageUpgrade libmysqlclient18-32bitUpgrade libmysqld-devel | Dec 18, 2015 | Dec 16, 2014 |
| Ubuntu | — | Upgrade libpcre3 | Nov 8, 2024 | Dec 16, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub