PCRE (Perl Compatible Regular Expressions) przed wersją 8.38 vulnerabilities

The vulnerability in PCRE before version 8.38 mishandles patterns with certain forward references, which can lead to a buffer overflow and potentially other impacts via a crafted regular expression.

The vulnerability in PCRE before version 8.38 mishandles patterns with certain recursive back references, allowing a remote attacker to cause a denial of service (buffer overflow) or possibly other impacts via a crafted regular expression.

The pcre_exec function in PCRE before 8.38 mishandles a // pattern with a \01 string, allowing remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have other impacts via a crafted regular expression, as demonstrated by a JavaScript RegExp object in Konqueror.