Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Php | — | Apply OS X security update 2008-002 | Dec 16, 2011 | Nov 7, 2007 |
| Apple Osx Xquery | — | Apply OS X security update 2007-009 | Dec 16, 2011 | Nov 7, 2007 |
| Debian | — | Upgrade glib2.0Upgrade pcre3 | Jul 30, 2024 | Nov 7, 2007 |
| Freebsd | — | Upgrade pcreUpgrade pcre-utf8 | Dec 10, 2025 | Nov 6, 2007 |
| Gentoo Linux | — | Upgrade dev-libs/libpcre. | Oct 30, 2017 | Nov 7, 2007 |
| Oracle_linux | — | Upgrade pcreUpgrade pcre-devel | Oct 16, 2024 | Nov 7, 2007 |
| Suse | — | Upgrade php4-gettextUpgrade apache2-mod_php4Upgrade php4-socketsUpgrade apache-mod_php4Upgrade php4-mysqlUpgrade php4-qtdomUpgrade php4-imapUpgrade php4-mcryptUpgrade mod_php4-apache2Upgrade php4-sessionUpgrade php4-fastcgiUpgrade php4-recodeUpgrade pcre-develUpgrade php4-swfUpgrade mod_php4-coreUpgrade php4-exifUpgrade php4-sysvshmUpgrade php4-domxmlUpgrade apache2-preforkUpgrade php4-dbaseUpgrade pcreUpgrade glib2-32bitUpgrade glib2-64bitUpgrade apache2-example-pagesUpgrade php4-mcalUpgrade php4-shmopUpgrade php4-gdUpgrade glib2-devel-64bitUpgrade glib2-develUpgrade apache2-docUpgrade pcre-x86Upgrade php4-sysvsemUpgrade php4-mime_magicUpgrade php4-zlibUpgrade php4-dbaUpgrade php4-calendarUpgrade php4-pgsqlUpgrade php4-wddxUpgrade php4-fileproUpgrade php4-develUpgrade php4-mhashUpgrade apache2-workerUpgrade libapr0Upgrade php4-ctypeUpgrade glib2Upgrade apache2Upgrade php4-mbstringUpgrade php4-iconvUpgrade php4-bz2Upgrade php4-readlineUpgrade php4-pearUpgrade pcre-32bitUpgrade php4-snmpUpgrade php4-curlUpgrade php4-ftpUpgrade pcre-64bitUpgrade apache2-develUpgrade php4-gmpUpgrade php4-ypUpgrade php4-ldapUpgrade mod_php4-servletUpgrade php4-bcmathUpgrade glib2-docUpgrade suse-releaseUpgrade php4-unixODBCUpgrade php4-xslt | Feb 17, 2015 | Nov 7, 2007 |
| Ubuntu | — | Upgrade libpcre3Upgrade libpcrecpp0 | Nov 8, 2024 | Nov 7, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub