The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large number of times within a repeated outer group that has a zero minimum quantifier.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pcre3 | Jul 30, 2024 | Jan 14, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 22, 2015 |
| Freebsd | — | Upgrade pcre | Dec 10, 2025 | May 22, 2015 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Jan 14, 2020 |
| Oracle Solaris | — | Upgrade library/pcre to version 8.37-0.175.2.13.0.3.0 on Solaris 11.2 | May 29, 2017 | May 29, 2017 |
| Php | — | Upgrade to PHP version 5.5.26Upgrade to PHP version 5.4.41Upgrade to PHP version 5.6.9 | Sep 15, 2022 | Jan 14, 2020 |
| Suse | — | Upgrade php7-fileinfoUpgrade php7-imapUpgrade php72-develUpgrade libmysqlclient_r18-32bitUpgrade php7-mcryptUpgrade libpcrecpp0Upgrade php7-opcacheUpgrade php7-pearUpgrade libpcre2-8-0Upgrade mariadb-errormessagesUpgrade php7-intlUpgrade php7-sysvshmUpgrade php7-gmpUpgrade libpcre2-posix2Upgrade pcre-toolsUpgrade php7-zipUpgrade libmysqlclient-develUpgrade php7-pspellUpgrade php7-bz2Upgrade php7-xmlreaderUpgrade libmysqlclient18-32bitUpgrade pcre-develUpgrade libpcreposix0Upgrade php7-sqliteUpgrade php7-sodiumUpgrade php7-socketsUpgrade pcre2-develUpgrade php7-gdUpgrade libpcre2-32-0Upgrade php7-ctypeUpgrade mariadbUpgrade php7-curlUpgrade php7-odbcUpgrade php7-xmlrpcUpgrade php7-dbaUpgrade libpcre1-32bitUpgrade php7-mysqlUpgrade php7-calendarUpgrade mariadb-toolsUpgrade php7-xslUpgrade php7-tokenizerUpgrade php7-exifUpgrade php7-ftpUpgrade php7-opensslUpgrade mariadb-clientUpgrade php7-pear-archive_tarUpgrade php7-pcntlUpgrade php7-embedUpgrade libmysqld-develUpgrade php7-tidyUpgrade libmysqlclient_r18Upgrade php7-sysvsemUpgrade libpcre2-16-0Upgrade mariadb-100-errormessagesUpgrade php7-snmpUpgrade pcre-devel-staticUpgrade php7Upgrade php7-gettextUpgrade php7-zlibUpgrade php7-soapUpgrade php7-xmlwriterUpgrade sles12-docker-imageUpgrade apache2-mod_php7Upgrade php7-mbstringUpgrade php7-pdoUpgrade php7-iconvUpgrade php7-jsonUpgrade php7-sysvmsgUpgrade php7-enchantUpgrade php7-bcmathUpgrade php7-domUpgrade libmysqlclient18Upgrade php7-fpmUpgrade php7-develUpgrade php7-pgsqlUpgrade php7-readlineUpgrade sles12sp1-docker-imageUpgrade php7-shmopUpgrade libmysqld18Upgrade php7-posixUpgrade php7-pharUpgrade libpcrecpp0-32bitUpgrade libpcre1Upgrade libpcre16-0Upgrade php7-fastcgiUpgrade php7-wddxUpgrade php7-ldap | Dec 18, 2015 | Jul 29, 2015 |
| Ubuntu | — | Upgrade libpcre3 | Apr 4, 2016 | Jul 29, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub