The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large number of times within a repeated outer group that has a zero minimum quantifier.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1:8.31-2ubuntu2.1", "binary_name": "libpcre3" }, { "binary_version": "1:8.31-2ubuntu2.1", "binary_name": "libpcre3-dbg" }, { "binary_version": "1:8.31-2ubuntu2.1", "binary_name": "libpcre3-dbgsym" }, { "binary_version": "1:8.31-2ubuntu2.1", "binary_name": "libpcre3-dev" }, { "binary_version": "1:8.31-2ubuntu2.1", "binary_name": "libpcre3-dev-dbgsym" }, { "binary_version": "1:8.31-2ubuntu2.1", "binary_name": "libpcre3-udeb" }, { "binary_version": "1:8.31-2ubuntu2.1", "binary_name": "libpcre3-udeb-dbgsym" }, { "binary_version": "1:8.31-2ubuntu2.1", "binary_name": "libpcrecpp0" }, { "binary_version": "1:8.31-2ubuntu2.1", "binary_name": "libpcrecpp0-dbgsym" }, { "binary_version": "1:8.31-2ubuntu2.1", "binary_name": "pcregrep" }, { "binary_version": "1:8.31-2ubuntu2.1", "binary_name": "pcregrep-dbgsym" } ] }