Perl-Compatible Regular Expression (PCRE) library before 7.3 does not properly compute the length of (1) a p sequence, (2) a P sequence, or (3) a P{x} sequence, which allows context-dependent attackers to cause a denial of service (infinite loop or crash) or execute arbitrary code.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pcre | Pcre | * | 6.0 (including) |
| Pcre | Pcre | * | 6.1 (including) |
| Pcre | Pcre | * | 7.3 (including) |
| Pcre3 | Ubuntu | dapper | * |
| Pcre3 | Ubuntu | edgy | * |
| Pcre3 | Ubuntu | feisty | * |
| Pcre3 | Ubuntu | gutsy | * |
| Pcre3 | Ubuntu | upstream | * |