PC
Product
Pcre
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 9Medium 4Low 0
Watch
Add Pcre to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-3210 | 9.8 | Dec 13 | Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by… Affected: 8.34; 8.35; 8.36; 8.37 |
| CVE-2016-3191 | 9.8 | Mar 17 | The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in… Affected: 8.00; 8.01; 8.02; 8.10; 8.11; 8.12; +12 more |
| CVE-2016-1283 | 9.8 | Jan 3 | The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the… Affected: 8.38 |
| CVE-2015-8391 | 9.8 | Dec 2 | The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or… Affected: before 8.38 |
| CVE-2015-5073 | 9.1 | Dec 13 | Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive… Affected: through 8.37 |
| CVE-2015-2325 | 7.8 | Jan 14 | The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or… Affected: before 8.37 |
| CVE-2017-7246 | 7.8 | Mar 23 | Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268)… Affected: 8.40 |
| CVE-2017-7245 | 7.8 | Mar 23 | Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or… Affected: 8.40 |
| CVE-2019-20838 | 7.5 | Jun 15 | libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454 Affected: before 8.43 |
| CVE-2017-11164 | 7.5 | Jul 11 | In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression Affected: 8.41 |
| CVE-2017-7186 | 7.5 | Mar 20 | libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering… Affected: 8.40 |
| CVE-2017-6004 | 7.5 | Feb 16 | The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled version) allows remote attackers to cause a… Affected: through 8.38 |
| CVE-2015-3217 | 7.5 | Dec 13 | PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a… Affected: 7.8; 8.32; 8.33; 8.34; 8.35; 8.36; +1 more |
| CVE-2014-9769 | 7.3 | Mar 28 | pcre_jit_compile.c in PCRE 8.35 does not properly use table jumps to optimize nested alternatives, which allows remote attackers to cause a denial of service (stack memory… Affected: 8.35 |
| CVE-2015-2326 | 5.5 | Jan 14 | The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular… Affected: before 8.37 |
| CVE-2017-16231 | 5.5 | Mar 17 | In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive call Affected: 8.41 |
| CVE-2017-7244 | 5.5 | Mar 23 | The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file Affected: 8.40 |
| CVE-2020-14155 | 5.3 | Jun 15 | libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring Affected: before 8.44 |
| CVE-2015-2328 | – | Dec 2 | PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service (segmentation… Affected: through 8.35 |
| CVE-2014-8964 | – | Dec 16 | Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression,… Affected: through 8.36 |
| CVE-2008-2371 | – | Jul 7 | Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash)… Affected: 7.7 |
| CVE-2008-0674 | – | Feb 18 | Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with… Affected: through 7.5 |
| CVE-2006-7230 | – | Nov 15 | Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate the amount of memory needed for a compiled regular expression pattern when the (1) -x or… Affected: through 6.9 |
| CVE-2006-7228 | – | Nov 14 | Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow context-dependent attackers to execute arbitrary code via a regular expression that… Affected: through 6.6 |
| CVE-2006-7227 | – | Nov 14 | Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to execute arbitrary code via a regular expression containing a… Affected: through 6.6 |
| CVE-2007-4768 | – | Nov 7 | Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode… Affected: through 6.0; through 6.1; through 7.3 |
| CVE-2007-4767 | – | Nov 7 | Perl-Compatible Regular Expression (PCRE) library before 7.3 does not properly compute the length of (1) a \p sequence, (2) a \P sequence, or (3) a \P{x} sequence, which allows… Affected: through 6.0; through 6.1; through 7.3 |
| CVE-2007-4766 | – | Nov 7 | Multiple integer overflows in Perl-Compatible Regular Expression (PCRE) library before 7.3 allow context-dependent attackers to cause a denial of service (crash) or execute… Affected: through 7.3 |
| CVE-2007-1662 | – | Nov 7 | Perl-Compatible Regular Expression (PCRE) library before 7.3 reads past the end of the string when searching for unmatched brackets and parentheses, which allows context-dependent… Affected: through 7.3 |
| CVE-2007-1660 | – | Nov 7 | Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer… Affected: through 6.9 |
| CVE-2007-1659 | – | Nov 7 | Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via regex… Affected: through 7.3 |
| CVE-2005-4872 | – | Dec 31 | Perl-Compatible Regular Expression (PCRE) library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a… Affected: through 6.1 |
| CVE-2005-2491 | – | Aug 23 | Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to… Affected: 5.0; 6.0; 6.1 |
Showing 33