tocsin

Debian/pcre3: critical 9.1

Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap

Action: Upgrade pcre3 to 2:8.35-7 or later.

Affected

introducedfixedlast affected
02:8.35-7-

Fixed versions

2:8.35-7

Sources

published · modified · JSON