The compileregex function in pcrecompile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles the /(?J:(?|(:(?|(?'R')(\k'R')|((?'R')))H'Rk'Rf)|s(?'R'))))/ and /(?J:(?|(:(?|(?'R')(\z(?|(?'R')(\k'R')|((?'R')))k'R')|((?'R')))H'Ak'Rf)|s(?'R')))/ patterns, and related patterns with certain group references, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
{ "binaries": [ { "binary_name": "libpcre2-16-0", "binary_version": "10.20-3" }, { "binary_name": "libpcre2-16-0-dbgsym", "binary_version": "10.20-3" }, { "binary_name": "libpcre2-32-0", "binary_version": "10.20-3" }, { "binary_name": "libpcre2-32-0-dbgsym", "binary_version": "10.20-3" }, { "binary_name": "libpcre2-8-0", "binary_version": "10.20-3" }, { "binary_name": "libpcre2-8-0-dbgsym", "binary_version": "10.20-3" }, { "binary_name": "libpcre2-dbg", "binary_version": "10.20-3" }, { "binary_name": "libpcre2-dev", "binary_version": "10.20-3" }, { "binary_name": "libpcre2-dev-dbgsym", "binary_version": "10.20-3" }, { "binary_name": "libpcre2-posix0", "binary_version": "10.20-3" }, { "binary_name": "libpcre2-posix0-dbgsym", "binary_version": "10.20-3" }, { "binary_name": "pcre2-utils", "binary_version": "10.20-3" }, { "binary_name": "pcre2-utils-dbgsym", "binary_version": "10.20-3" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "libpcre16-3", "binary_version": "2:8.38-3" }, { "binary_name": "libpcre16-3-dbgsym", "binary_version": "2:8.38-3" }, { "binary_name": "libpcre3", "binary_version": "2:8.38-3" }, { "binary_name": "libpcre3-dbg", "binary_version": "2:8.38-3" }, { "binary_name": "libpcre3-dbgsym", "binary_version": "2:8.38-3" }, { "binary_name": "libpcre3-dev", "binary_version": "2:8.38-3" }, { "binary_name": "libpcre3-dev-dbgsym", "binary_version": "2:8.38-3" }, { "binary_name": "libpcre3-udeb", "binary_version": "2:8.38-3" }, { "binary_name": "libpcre3-udeb-dbgsym", "binary_version": "2:8.38-3" }, { "binary_name": "libpcre32-3", "binary_version": "2:8.38-3" }, { "binary_name": "libpcre32-3-dbgsym", "binary_version": "2:8.38-3" }, { "binary_name": "libpcrecpp0v5", "binary_version": "2:8.38-3" }, { "binary_name": "libpcrecpp0v5-dbgsym", "binary_version": "2:8.38-3" }, { "binary_name": "pcregrep", "binary_version": "2:8.38-3" }, { "binary_name": "pcregrep-dbgsym", "binary_version": "2:8.38-3" } ], "availability": "No subscription required" }