Debian/pcre2: high 7.4
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.
Action: Upgrade pcre2 to 10.42-1+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.42-1+deb12u1 | - |
Fixed versions
| 10.42-1+deb12u1 |
Sources
published · modified · JSON