tocsin

Debian/pcre3: unknown

PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overfl

Action: Upgrade pcre3 to 2:8.35-7 or later.

Affected

introducedfixedlast affected
02:8.35-7-

Fixed versions

2:8.35-7

Sources

published · modified · JSON