pcre3 vulnerabilities (Debian)
52 vulnerabilities.
-
pcre3Debian libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X... 7.5 High -
pcre3Debian libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring. 5.3 Medium -
pcre3Debian ** DISPUTED ** In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow... 5.5 Medium -
pcre3Debian In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion... 7.5 High -
pcre3Debian Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in... 7.8 High -
pcre3Debian Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in... 7.8 High -
pcre3Debian The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to... 5.5 Medium -
pcre3Debian libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of... 7.5 High -
pcre3Debian The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before... 7.5 High -
pcre3Debian PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow... 7.5 High -
pcre3Debian pcre_jit_compile.c in PCRE 8.35 does not properly use table jumps to optimize nested alternatives... 7.3 High -
pcre3Debian The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in... 9.8 Critical -
pcre3Debian The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\")... 9.8 Critical -
pcre3Debian PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial... 7.5 High -
pcre3Debian PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote... 9.8 Critical -
pcre3Debian pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote... 7.5 High -
pcre3Debian PCRE before 8.38 mishandles certain instances of the (?| substring, which allows remote attackers... 7.5 High -
pcre3Debian The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting,... 9.8 Critical -
pcre3Debian PCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote... 9.8 Critical -
pcre3Debian PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote... 9.8 Critical -
pcre3Debian PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an... 7.5 High -
pcre3Debian PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows... 7.3 High -
pcre3Debian PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive... 9.8 Critical -
pcre3Debian PCRE before 8.38 mishandles the /(?|(\k'Pm')|(?'Pm'))/ pattern and related patterns with certain... 7.5 High -
pcre3Debian PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns with certain... 7.5 High -
pcre3Debian PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to... 9.8 Critical -
pcre3Debian The match function in pcre_exec.c in PCRE before 8.37 mishandles the /(?:((abcd))|(((?:(?:(?:(?... 6.4 Medium -
pcre3Debian The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2... 7.5 High -
pcre3Debian The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \01... 7.5 High -
pcre3Debian PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain... 7.5 High -
pcre3Debian PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern and related patterns with certain... 7.5 High -
pcre3Debian Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38... 9.1 Critical -
pcre3Debian Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to... 9.8 Critical -
pcre3Debian The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile... 5.5 Medium -
pcre3Debian The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile... 7.8 High -
pcre3Debian Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of... 5.0 Medium -
pcre3Debian Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE)... 7.5 High -
pcre3Debian Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a... 7.5 High -
pcre3Debian Perl-Compatible Regular Expression (PCRE) library before 6.7 does not properly calculate the... 4.3 Medium -
pcre3Debian Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers... 4.3 Medium -
pcre3Debian Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate the... 4.3 Medium -
pcre3Debian Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow... 6.8 Medium -
pcre3Debian Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context... 6.8 Medium -
pcre3Debian Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows... 6.8 Medium -
pcre3Debian Perl-Compatible Regular Expression (PCRE) library before 7.3 does not properly compute the length... 5.0 Medium -
pcre3Debian Multiple integer overflows in Perl-Compatible Regular Expression (PCRE) library before 7.3 allow... 7.5 High -
pcre3Debian Perl-Compatible Regular Expression (PCRE) library before 7.3 reads past the end of the string... 5.0 Medium -
pcre3Debian Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matching... 6.4 Medium -
pcre3Debian Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes... 6.8 Medium -
pcre3Debian Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers... 6.8 Medium - Show olderLoading…