Heap-based buffer overflow in the findfixedlength function in pcrecompile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "libpcre3": "1:8.31-2ubuntu2.1", "libpcrecpp0-dbgsym": "1:8.31-2ubuntu2.1", "libpcre3-udeb": "1:8.31-2ubuntu2.1", "libpcre3-dev-dbgsym": "1:8.31-2ubuntu2.1", "libpcre3-dbgsym": "1:8.31-2ubuntu2.1", "libpcre3-udeb-dbgsym": "1:8.31-2ubuntu2.1", "pcregrep": "1:8.31-2ubuntu2.1", "pcregrep-dbgsym": "1:8.31-2ubuntu2.1", "libpcre3-dbg": "1:8.31-2ubuntu2.1", "libpcrecpp0": "1:8.31-2ubuntu2.1", "libpcre3-dev": "1:8.31-2ubuntu2.1" } ] }