The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large number of times within a repeated outer group that has a zero minimum quantifier.
| Software | From | Fixed in |
|---|---|---|
| php / php | 5.4.0 | 5.4.41 |
| php / php | 5.5.0 | 5.5.26 |
| php / php | 5.6.0 | 5.6.9 |
| opensuse / opensuse | 13.1 | 13.1.x |
| opensuse / opensuse | 13.2 | 13.2.x |
| mariadb / mariadb | - | 10.0.18 |
| pcre / pcre | - | 8.37 |