tocsin

Debian/pcre3: unknown

PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have

Action: Upgrade pcre3 to 2:8.35-7.2 or later.

Affected

introducedfixedlast affected
02:8.35-7.2-

Fixed versions

2:8.35-7.2

Sources

published · modified · JSON