Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pcre | Aug 30, 2017 | Dec 16, 2014 |
| Debian | — | Upgrade pcre3 | Jul 30, 2024 | Dec 16, 2014 |
| Gentoo Linux | — | Upgrade dev-libs/libpcre. | Oct 30, 2017 | Dec 16, 2014 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Dec 16, 2014 |
| Oracle Solaris | — | Upgrade library/pcre to version 8.37-0.175.2.13.0.3.0 on Solaris 11.2 | May 29, 2017 | Dec 16, 2014 |
| Oracle_linux | — | Upgrade pcre-develUpgrade pcre-toolsUpgrade pcre-staticUpgrade pcre | Oct 16, 2024 | Dec 16, 2014 |
| Suse | — | Upgrade pcre-develUpgrade libpcrecpp0-32bitUpgrade libmysqld-develUpgrade pcre-devel-staticUpgrade libmysqld18Upgrade libpcreposix0Upgrade sles12sp1-docker-imageUpgrade libmysqlclient18-32bitUpgrade mariadb-100-errormessagesUpgrade libmysqlclient_r18-32bitUpgrade libpcre2-posix2Upgrade libpcre2-32-0Upgrade libmysqlclient18Upgrade libpcre1Upgrade libpcre16-0Upgrade mariadb-errormessagesUpgrade mariadbUpgrade mariadb-clientUpgrade libmysqlclient-develUpgrade libpcre2-16-0Upgrade pcre2-develUpgrade libpcre2-8-0Upgrade libpcre1-32bitUpgrade mariadb-toolsUpgrade libmysqlclient_r18Upgrade libpcrecpp0Upgrade sles12-docker-imageUpgrade pcre-tools | Dec 18, 2015 | Dec 16, 2014 |
| Ubuntu | — | Upgrade libpcre3 | Nov 8, 2024 | Dec 16, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub