Perl-Compatible Regular Expression (PCRE) library before 7.3 reads past the end of the string when searching for unmatched brackets and parentheses, which allows context-dependent attackers to cause a denial of service (crash), possibly involving forward references.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Pcre | Pcre | * | 7.3 (including) |
Pcre3 | Ubuntu | dapper | * |
Pcre3 | Ubuntu | edgy | * |
Pcre3 | Ubuntu | feisty | * |
Pcre3 | Ubuntu | gutsy | * |
Pcre3 | Ubuntu | upstream | * |