Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Php | — | Upgrade macOS to the latest version | Dec 16, 2011 | Jul 7, 2008 |
| Debian | — | Upgrade pcre3 | Jul 30, 2024 | Jul 7, 2008 |
| Freebsd | — | Upgrade php5 | Dec 10, 2025 | Dec 7, 2008 |
| Gentoo Linux | — | Upgrade dev-libs/glib.Upgrade dev-lang/php.Upgrade dev-libs/libpcre. | Oct 30, 2017 | Jul 7, 2008 |
| Php | — | Upgrade to PHP version 5.2.7 | Sep 15, 2022 | Jul 7, 2008 |
| Suse | — | Upgrade typelib-1_0-GLib-2_0Upgrade typelib-1_0-GLibUnix-2_0Upgrade glib2-devel-32bitUpgrade typelib-1_0-GObject-2_0Upgrade libgthread-2_0-0-x86Upgrade typelib-1_0-GIRepository-3_0Upgrade glib2-docUpgrade libglib-2_0-0Upgrade libglib-2_0-0-32bitUpgrade libgobject-2_0-0-32bitUpgrade glib2Upgrade typelib-1_0-GModule-2_0Upgrade glib2-develUpgrade libglib-2_0-0-x86Upgrade libgio-famUpgrade libgio-2_0-0-32bitUpgrade libgio-2_0-0Upgrade libgobject-2_0-0-x86Upgrade libgmodule-2_0-0Upgrade libgthread-2_0-0Upgrade libgobject-2_0-0Upgrade libgio-2_0-0-x86Upgrade glib2-toolsUpgrade glib2-langUpgrade libgthread-2_0-0-32bitUpgrade glib2-devel-staticUpgrade libgmodule-2_0-0-x86Upgrade libgirepository-2_0-0Upgrade libgmodule-2_0-0-32bitUpgrade typelib-1_0-Gio-2_0 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade php5-cgiUpgrade php5-curlUpgrade php5-cliUpgrade libpcre3Upgrade erlang-baseUpgrade libapache2-mod-php5 | Nov 8, 2024 | Jul 7, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub