CVE-2016-1283
- Source
- https://cve.org/CVERecord?id=CVE-2016-1283
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-1283.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2016-1283
- Downstream
- Related
- Published
- 2016-01-03T00:59:03Z
- Modified
- 2026-07-07T08:45:56Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'){97)?J)?J)(?'R'(?'R'){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "22" }, { "last_affected": "22" }, { "introduced": "23" }, { "last_affected": "23" } ], "source": "CPE_STRING", "vendor_product": "fedoraproject:fedora" }, { "cpes": [ "cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "11.3" }, { "last_affected": "11.3" } ], "source": "CPE_STRING", "vendor_product": "oracle:solaris" }, { "cpes": [ "cpe:2.3:a:pcre:pcre:8.38:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "8.38" }, { "last_affected": "8.38" } ], "source": "CPE_STRING", "vendor_product": "pcre:pcre" } ] }- References
-
- http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178193.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178955.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/79825
- http://www.securitytracker.com/id/1034555
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.343110
- https://access.redhat.com/errata/RHSA-2016:1132
- https://security.gentoo.org/glsa/201607-02
- https://www.tenable.com/security/tns-2016-18
- https://www.tenable.com/security/tns-2017-14
- https://bto.bluecoat.com/security-advisory/sa128
- https://bugs.exim.org/show_bug.cgi?id=1767
Affected packages
Git / github.com/php/php-src
Affected ranges
- Type
- GIT
- Repo
- https://github.com/php/php-src
- Events
- Database specific
-
Show details
{ "cpe": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "5.6.0" }, { "fixed": "5.6.32" }, { "introduced": "7.0.0" }, { "fixed": "7.0.25" }, { "introduced": "7.1.0" }, { "fixed": "7.1.11" } ], "source": "CPE_RANGE" }