Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Php | — | Apply OS X security update 2008-002 | Dec 16, 2011 | Nov 7, 2007 |
| Apple Osx Xquery | — | Apply OS X security update 2007-009 | Dec 16, 2011 | Nov 7, 2007 |
| Debian | — | Upgrade glib2.0Upgrade pcre3 | Jul 30, 2024 | Nov 7, 2007 |
| Freebsd | — | Upgrade pcre-utf8Upgrade pcre | Dec 10, 2025 | Nov 6, 2007 |
| Gentoo Linux | — | Upgrade dev-libs/libpcre. | Oct 30, 2017 | Nov 7, 2007 |
| Oracle_linux | — | Upgrade pcreUpgrade pcre-devel | Oct 16, 2024 | Nov 7, 2007 |
| Suse | — | Upgrade php4-curlUpgrade php4-fastcgiUpgrade php4-unixODBCUpgrade pcre-32bitUpgrade php4-gdUpgrade php4-sessionUpgrade php4-ctypeUpgrade php4-mhashUpgrade php4-pgsqlUpgrade php4-gmpUpgrade php4-bcmathUpgrade php4-iconvUpgrade glib2-devel-64bitUpgrade php4-dbaUpgrade pcre-develUpgrade apache-mod_php4Upgrade php4-mcryptUpgrade php4-ftpUpgrade php4-gettextUpgrade php4-imapUpgrade php4-dbaseUpgrade php4-mcalUpgrade mod_php4-apache2Upgrade apache2-mod_php4Upgrade php4-mysqlUpgrade glib2-docUpgrade php4-domxmlUpgrade php4-wddxUpgrade pcre-x86Upgrade php4-bz2Upgrade php4-zlibUpgrade php4-sysvsemUpgrade php4-fileproUpgrade php4-socketsUpgrade pcreUpgrade php4-calendarUpgrade php4-qtdomUpgrade glib2-develUpgrade glib2-64bitUpgrade php4-develUpgrade glib2-32bitUpgrade php4-ldapUpgrade pcre-64bitUpgrade php4-shmopUpgrade php4-recodeUpgrade php4-xsltUpgrade glib2Upgrade mod_php4-servletUpgrade php4-mime_magicUpgrade php4-swfUpgrade php4-ypUpgrade php4-mbstringUpgrade php4-sysvshmUpgrade mod_php4-coreUpgrade php4-exifUpgrade php4-readlineUpgrade php4-snmpUpgrade php4-pearUpgrade suse-release | Feb 17, 2015 | Nov 7, 2007 |
| Ubuntu | — | Upgrade libpcre3Upgrade libpcrecpp0 | Nov 8, 2024 | Nov 7, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub