pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pcre | Aug 30, 2017 | Dec 1, 2015 |
| Debian | — | Upgrade pcre3 | Jul 30, 2024 | Dec 2, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 8, 2016 |
| Freebsd | — | Upgrade php55-wddxUpgrade php56Upgrade php56-pharUpgrade php55-pharUpgrade php55Upgrade php56-wddx | Dec 10, 2025 | Feb 9, 2016 |
| Gentoo Linux | — | Upgrade dev-libs/libpcre. | Oct 30, 2017 | Dec 1, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade pcreUpgrade pcre-devel | Dec 4, 2019 | Dec 2, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pcreUpgrade pcre-devel | Dec 18, 2019 | Dec 2, 2015 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pcreUpgrade pcre-devel | Nov 19, 2019 | Dec 2, 2015 |
| Php | — | Upgrade to PHP version 5.5.32Upgrade to PHP version 5.6.18Upgrade to PHP version 7.0.3 | Sep 23, 2022 | Dec 2, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 23, 2015 |
| Suse | — | Upgrade libpcre16-0Upgrade sles12-docker-imageUpgrade pcre-develUpgrade pcre-devel-staticUpgrade sles12sp1-docker-imageUpgrade libpcrecpp0-32bitUpgrade libpcre1Upgrade libpcre1-32bitUpgrade pcre-toolsUpgrade libpcreposix0Upgrade libpcrecpp0 | Dec 2, 2016 | Dec 1, 2015 |
| Ubuntu | — | Upgrade libpcre3 | Apr 4, 2016 | Dec 1, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub