The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Perl-Compatible Regular Expression (PCRE) library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers to cause a denial of service (error or crash).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade glib2.0Upgrade pcre3 | Jul 30, 2024 | Dec 3, 2007 |
| Oracle_linux | — | Upgrade pcreUpgrade pcre-devel | Oct 16, 2024 | Dec 3, 2007 |
| Suse | — | Upgrade php4-mime_magicUpgrade php4-unixODBCUpgrade php4-domxmlUpgrade php4-mcryptUpgrade php4-sysvsemUpgrade pcreUpgrade php4-ctypeUpgrade pcre-x86Upgrade php4-mbstringUpgrade php4-shmopUpgrade php4-ftpUpgrade php4-bz2Upgrade php4-mhashUpgrade php4-bcmathUpgrade php4-mcalUpgrade php4-imapUpgrade php4-gettextUpgrade php4-snmpUpgrade php4-fastcgiUpgrade mod_php4-coreUpgrade php4-gmpUpgrade php4-iconvUpgrade php4-curlUpgrade php4-pgsqlUpgrade php4-sessionUpgrade mod_php4-apache2Upgrade pcre-32bitUpgrade apache-mod_php4Upgrade php4-wddxUpgrade php4-dbaUpgrade php4-exifUpgrade php4-ypUpgrade php4-fileproUpgrade php4-sysvshmUpgrade php4-qtdomUpgrade php4-gdUpgrade mod_php4-servletUpgrade php4-pearUpgrade php4-calendarUpgrade php4-swfUpgrade php4-recodeUpgrade php4-readlineUpgrade php4-dbaseUpgrade php4-xsltUpgrade php4-socketsUpgrade php4-mysqlUpgrade pcre-develUpgrade pcre-64bitUpgrade apache2-mod_php4Upgrade php4-ldapUpgrade php4-develUpgrade php4-zlib | Feb 17, 2015 | Dec 3, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub