tocsin

Debian/pcre3: unknown

The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly

Action: Upgrade pcre3 to 2:8.38-1 or later.

Affected

introducedfixedlast affected
02:8.38-1-

Fixed versions

2:8.38-1

Sources

published · modified · JSON