CVE-2008-2371
Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE)...
Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches.
Exploit likelihood
What each source reports
NVD Score used
7.5
Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches.
- Record
CVE-2008-2371- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches.
- Record
CVE-2008-2371- Updated
- 2026-11-02
EUVDEUVD-2008-2366 No score
Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches.
- Record
EUVD-2008-2366- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-853v-4rcq-pjpw No score
Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE)...
Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches.
- Record
GHSA-853v-4rcq-pjpw- Weakness
- CWE-119, CWE-787
- Updated
- 2026-11-02
OSV No score
Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches.
- Record
CVE-2008-2371- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-2371 No score
Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches.
- Record
DEBIAN-CVE-2008-2371- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10791-1 No score
gio-branding-upstream-2.68.4-2.2 on GA media
These are all security issues fixed in the gio-branding-upstream-2.68.4-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10791-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2371 is a high vulnerability (CVSS 7.5) in Pcre, published July 5, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.73%, the 93rd percentile. Fixed in pcre3 7.6-2.1.
References
vupen.com/english/advisories/2008/2005
mandriva.com/security/advisories?name=MDVSA-2008:147
secunia.com/advisories/32746
bugs.gentoo.org/show_bug.cgi?id=228091
marc.info?l=bugtraq&m=125631037611762&w=2
support.apple.com/kb/HT3549
Show 49 moreShow less
vupen.com/english/advisories/2008/2006
security.gentoo.org/glsa/glsa-200811-05.xml
marc.info?l=bugtraq&m=124654546101607&w=2
securityfocus.com/bid/31681
secunia.com/advisories/30972
ubuntu.com/usn/usn-624-2
secunia.com/advisories/32454
secunia.com/advisories/30944
secunia.com/advisories/30958
secunia.com/advisories/35074
ubuntu.com/usn/usn-628-1
secunia.com/advisories/39300
redhat.com/archives/fedora-package-announce/2008-July/msg00105.html
ftp.gnome.org/pub/GNOME/sources/glib/2.16/glib-2.16.4.changes
ubuntu.com/usn/usn-624-1
lists.apple.com/archives/security-announce/2009/May/msg00002.html
secunia.com/advisories/30967
vupen.com/english/advisories/2010/0833
redhat.com/archives/fedora-package-announce/2008-July/msg00123.html
mandriva.com/security/advisories?name=MDVSA-2009:023
secunia.com/advisories/31200
secunia.com/advisories/30916
secunia.com/advisories/32222
secunia.com/advisories/30961
lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html
securityfocus.com/bid/30087
secunia.com/advisories/30990
us-cert.gov/cas/techalerts/TA09-133A.html
wiki.rpath.com/wiki/Advisories:rPSA-2008-0305
vupen.com/english/advisories/2009/1297
debian.org/security/2008/dsa-1602
vupen.com/english/advisories/2008/2336
vupen.com/english/advisories/2008/2780
secunia.com/advisories/30945
gentoo.org/security/en/glsa/glsa-200807-03.xml
lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
support.apple.com/kb/HT3216
securityfocus.com/archive/1/497828/100/0/threaded
secunia.com/advisories/35650
nvd.nist.gov/vuln/detail/CVE-2008-2371
github.com/advisories/GHSA-853v-4rcq-pjpw
security-tracker.debian.org/tracker/CVE-2008-2371
suse.com/security/cve/CVE-2008-2371
suse.com/security/cve/CVE-2018-16428
suse.com/security/cve/CVE-2018-16429
suse.com/security/cve/CVE-2019-12450
suse.com/security/cve/CVE-2020-6750
suse.com/security/cve/CVE-2021-27218
suse.com/security/cve/CVE-2021-27219