The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pcre | Aug 30, 2017 | Mar 17, 2016 |
| Amazon_linux | — | Upgrade pcre | Sep 7, 2018 | Mar 17, 2016 |
| Debian | — | Upgrade pcre3Upgrade pcre2 | Mar 31, 2017 | Feb 29, 2016 |
| Freebsd | — | Upgrade pcreUpgrade pcre2 | Dec 10, 2025 | Mar 21, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade pcreUpgrade pcre-devel | Nov 30, 2017 | Mar 17, 2016 |
| Oracle Solaris | — | Upgrade library/pcre to version 8.39-0.175.3.17.0.1.0 on Solaris 11.3 | May 29, 2017 | Mar 17, 2016 |
| Oracle_linux | — | Upgrade pcre-staticUpgrade pcreUpgrade pcre-toolsUpgrade pcre-devel | May 11, 2016 | Mar 17, 2016 |
| Suse | — | Upgrade libpcre2-16-0Upgrade libpcre1Upgrade sles12-docker-imageUpgrade libpcre2-8-0Upgrade pcre-devel-staticUpgrade libpcreposix0Upgrade libpcre1-32bitUpgrade pcre-develUpgrade libpcrecpp0Upgrade pcre-toolsUpgrade libpcre2-posix2Upgrade libpcre2-32-0Upgrade pcre2-develUpgrade libpcre16-0Upgrade sles12sp1-docker-imageUpgrade libpcrecpp0-32bit | Aug 26, 2016 | Mar 17, 2016 |
| Ubuntu | — | Upgrade libpcre3 | Apr 4, 2016 | Mar 17, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub