pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pcre | Aug 30, 2017 | Dec 1, 2015 |
| Debian | — | Upgrade pcre3 | Jul 30, 2024 | Dec 2, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 8, 2016 |
| Freebsd | — | Upgrade php55Upgrade php55-pharUpgrade php56-pharUpgrade php56-wddxUpgrade php55-wddxUpgrade php56 | Dec 10, 2025 | Feb 9, 2016 |
| Gentoo Linux | — | Upgrade dev-libs/libpcre. | Oct 30, 2017 | Dec 1, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade pcre-develUpgrade pcre | Dec 4, 2019 | Dec 2, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pcre-develUpgrade pcre | Dec 18, 2019 | Dec 2, 2015 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pcreUpgrade pcre-devel | Nov 19, 2019 | Dec 2, 2015 |
| Php | — | Upgrade to PHP version 7.0.3Upgrade to PHP version 5.6.18Upgrade to PHP version 5.5.32 | Sep 23, 2022 | Dec 2, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 23, 2015 |
| Suse | — | Upgrade libpcrecpp0Upgrade pcre-toolsUpgrade libpcreposix0Upgrade libpcre1-32bitUpgrade pcre-devel-staticUpgrade sles12-docker-imageUpgrade sles12sp1-docker-imageUpgrade libpcrecpp0-32bitUpgrade pcre-develUpgrade libpcre16-0Upgrade libpcre1 | Dec 2, 2016 | Dec 1, 2015 |
| Ubuntu | — | Upgrade libpcre3 | Apr 4, 2016 | Dec 1, 2015 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub