pcrejitcompile.c in PCRE 8.35 does not properly use table jumps to optimize nested alternatives, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a crafted string, as demonstrated by packets encountered by Suricata during use of a regular expression in an Emerging Threats Open ruleset.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libpcre3", "binary_version": "1:8.31-2ubuntu2.1" }, { "binary_name": "libpcre3-dbg", "binary_version": "1:8.31-2ubuntu2.1" }, { "binary_name": "libpcre3-dbgsym", "binary_version": "1:8.31-2ubuntu2.1" }, { "binary_name": "libpcre3-dev", "binary_version": "1:8.31-2ubuntu2.1" }, { "binary_name": "libpcre3-dev-dbgsym", "binary_version": "1:8.31-2ubuntu2.1" }, { "binary_name": "libpcre3-udeb", "binary_version": "1:8.31-2ubuntu2.1" }, { "binary_name": "libpcre3-udeb-dbgsym", "binary_version": "1:8.31-2ubuntu2.1" }, { "binary_name": "libpcrecpp0", "binary_version": "1:8.31-2ubuntu2.1" }, { "binary_name": "libpcrecpp0-dbgsym", "binary_version": "1:8.31-2ubuntu2.1" }, { "binary_name": "pcregrep", "binary_version": "1:8.31-2ubuntu2.1" }, { "binary_name": "pcregrep-dbgsym", "binary_version": "1:8.31-2ubuntu2.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libpcre16-3", "binary_version": "2:8.38-3.1" }, { "binary_name": "libpcre16-3-dbgsym", "binary_version": "2:8.38-3.1" }, { "binary_name": "libpcre3", "binary_version": "2:8.38-3.1" }, { "binary_name": "libpcre3-dbg", "binary_version": "2:8.38-3.1" }, { "binary_name": "libpcre3-dbgsym", "binary_version": "2:8.38-3.1" }, { "binary_name": "libpcre3-dev", "binary_version": "2:8.38-3.1" }, { "binary_name": "libpcre3-dev-dbgsym", "binary_version": "2:8.38-3.1" }, { "binary_name": "libpcre3-udeb", "binary_version": "2:8.38-3.1" }, { "binary_name": "libpcre3-udeb-dbgsym", "binary_version": "2:8.38-3.1" }, { "binary_name": "libpcre32-3", "binary_version": "2:8.38-3.1" }, { "binary_name": "libpcre32-3-dbgsym", "binary_version": "2:8.38-3.1" }, { "binary_name": "libpcrecpp0v5", "binary_version": "2:8.38-3.1" }, { "binary_name": "libpcrecpp0v5-dbgsym", "binary_version": "2:8.38-3.1" }, { "binary_name": "pcregrep", "binary_version": "2:8.38-3.1" }, { "binary_name": "pcregrep-dbgsym", "binary_version": "2:8.38-3.1" } ] }