The pcre32xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "libpcre16-3", "binary_version": "2:8.38-3.1ubuntu0.1~esm2" }, { "binary_name": "libpcre16-3-dbgsym", "binary_version": "2:8.38-3.1ubuntu0.1~esm2" }, { "binary_name": "libpcre3", "binary_version": "2:8.38-3.1ubuntu0.1~esm2" }, { "binary_name": "libpcre3-dbg", "binary_version": "2:8.38-3.1ubuntu0.1~esm2" }, { "binary_name": "libpcre3-dbgsym", "binary_version": "2:8.38-3.1ubuntu0.1~esm2" }, { "binary_name": "libpcre3-dev", "binary_version": "2:8.38-3.1ubuntu0.1~esm2" }, { "binary_name": "libpcre3-dev-dbgsym", "binary_version": "2:8.38-3.1ubuntu0.1~esm2" }, { "binary_name": "libpcre3-udeb", "binary_version": "2:8.38-3.1ubuntu0.1~esm2" }, { "binary_name": "libpcre3-udeb-dbgsym", "binary_version": "2:8.38-3.1ubuntu0.1~esm2" }, { "binary_name": "libpcre32-3", "binary_version": "2:8.38-3.1ubuntu0.1~esm2" }, { "binary_name": "libpcre32-3-dbgsym", "binary_version": "2:8.38-3.1ubuntu0.1~esm2" }, { "binary_name": "libpcrecpp0v5", "binary_version": "2:8.38-3.1ubuntu0.1~esm2" }, { "binary_name": "libpcrecpp0v5-dbgsym", "binary_version": "2:8.38-3.1ubuntu0.1~esm2" }, { "binary_name": "pcregrep", "binary_version": "2:8.38-3.1ubuntu0.1~esm2" }, { "binary_name": "pcregrep-dbgsym", "binary_version": "2:8.38-3.1ubuntu0.1~esm2" } ] }