Total vulnerabilities in the database
The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular expression with a group containing both a forward referencing subroutine call and a recursive back reference, as demonstrated by "((?+1)(\1))/".
| Software | From | Fixed in |
|---|---|---|
| pcre / pcre | - | 8.37 |
| opensuse / opensuse | 13.1 | 13.1.x |
| opensuse / opensuse | 13.2 | 13.2.x |
| mariadb / mariadb | 10.0.0 | 10.0.18 |
| php / php | 5.5.0 | 5.5.26 |
| php / php | 5.4.0 | 5.4.41 |
| php / php | 5.6.0 | 5.6.9 |