PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
{
"binaries": [
{
"binary_name": "libpcre3",
"binary_version": "1:8.31-2ubuntu2.1"
},
{
"binary_name": "libpcre3-dbg",
"binary_version": "1:8.31-2ubuntu2.1"
},
{
"binary_name": "libpcre3-dbgsym",
"binary_version": "1:8.31-2ubuntu2.1"
},
{
"binary_name": "libpcre3-dev",
"binary_version": "1:8.31-2ubuntu2.1"
},
{
"binary_name": "libpcre3-dev-dbgsym",
"binary_version": "1:8.31-2ubuntu2.1"
},
{
"binary_name": "libpcre3-udeb",
"binary_version": "1:8.31-2ubuntu2.1"
},
{
"binary_name": "libpcre3-udeb-dbgsym",
"binary_version": "1:8.31-2ubuntu2.1"
},
{
"binary_name": "libpcrecpp0",
"binary_version": "1:8.31-2ubuntu2.1"
},
{
"binary_name": "libpcrecpp0-dbgsym",
"binary_version": "1:8.31-2ubuntu2.1"
},
{
"binary_name": "pcregrep",
"binary_version": "1:8.31-2ubuntu2.1"
},
{
"binary_name": "pcregrep-dbgsym",
"binary_version": "1:8.31-2ubuntu2.1"
}
],
"availability": "No subscription required"
}
{
"binaries": [
{
"binary_name": "libpcre16-3",
"binary_version": "2:8.38-3"
},
{
"binary_name": "libpcre16-3-dbgsym",
"binary_version": "2:8.38-3"
},
{
"binary_name": "libpcre3",
"binary_version": "2:8.38-3"
},
{
"binary_name": "libpcre3-dbg",
"binary_version": "2:8.38-3"
},
{
"binary_name": "libpcre3-dbgsym",
"binary_version": "2:8.38-3"
},
{
"binary_name": "libpcre3-dev",
"binary_version": "2:8.38-3"
},
{
"binary_name": "libpcre3-dev-dbgsym",
"binary_version": "2:8.38-3"
},
{
"binary_name": "libpcre3-udeb",
"binary_version": "2:8.38-3"
},
{
"binary_name": "libpcre3-udeb-dbgsym",
"binary_version": "2:8.38-3"
},
{
"binary_name": "libpcre32-3",
"binary_version": "2:8.38-3"
},
{
"binary_name": "libpcre32-3-dbgsym",
"binary_version": "2:8.38-3"
},
{
"binary_name": "libpcrecpp0v5",
"binary_version": "2:8.38-3"
},
{
"binary_name": "libpcrecpp0v5-dbgsym",
"binary_version": "2:8.38-3"
},
{
"binary_name": "pcregrep",
"binary_version": "2:8.38-3"
},
{
"binary_name": "pcregrep-dbgsym",
"binary_version": "2:8.38-3"
}
],
"availability": "No subscription required"
}