tocsin

Debian/pcre3: unknown

PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns with certain recursive back references, which allows remote attackers to cause a denial of service (buffer overflow

Action: Upgrade pcre3 to 2:8.35-7.2 or later.

Affected

introducedfixedlast affected
02:8.35-7.2-

Fixed versions

2:8.35-7.2

Sources

published · modified · JSON