The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pcre | Aug 30, 2017 | Mar 17, 2016 |
| Amazon_linux | — | Upgrade pcre | Sep 7, 2018 | Mar 17, 2016 |
| Debian | — | Upgrade pcre3Upgrade pcre2 | Mar 31, 2017 | Feb 29, 2016 |
| Freebsd | — | Upgrade pcre2Upgrade pcre | Dec 10, 2025 | Mar 21, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade pcre-develUpgrade pcre | Nov 30, 2017 | Mar 17, 2016 |
| Oracle Solaris | — | Upgrade library/pcre to version 8.39-0.175.3.17.0.1.0 on Solaris 11.3 | May 29, 2017 | Mar 17, 2016 |
| Oracle_linux | — | Upgrade pcre-develUpgrade pcreUpgrade pcre-staticUpgrade pcre-tools | May 11, 2016 | Mar 17, 2016 |
| Suse | — | Upgrade libpcrecpp0-32bitUpgrade sles12sp1-docker-imageUpgrade libpcre16-0Upgrade pcre2-develUpgrade sles12-docker-imageUpgrade libpcreposix0Upgrade libpcrecpp0Upgrade pcre-toolsUpgrade pcre-devel-staticUpgrade libpcre2-16-0Upgrade libpcre1-32bitUpgrade libpcre2-32-0Upgrade libpcre2-posix2Upgrade pcre-develUpgrade libpcre2-8-0Upgrade libpcre1 | Aug 26, 2016 | Mar 17, 2016 |
| Ubuntu | — | Upgrade libpcre3 | Apr 4, 2016 | Mar 17, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub