Search for packages
| purl | pkg:nuget/pcre.symbols@8.38.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-zghf-77cd-aaaj
Aliases: CVE-2016-3191 |
The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-01-16T23:28:14.351973+00:00 | GitLab Importer | Affected by | VCID-zghf-77cd-aaaj | None | 35.1.0 |
| 2024-09-17T22:45:50.549249+00:00 | GitLab Importer | Affected by | VCID-zghf-77cd-aaaj | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/pcre.symbols/CVE-2016-3191.yml | 34.0.1 |
| 2024-01-03T18:07:13.877076+00:00 | GitLab Importer | Affected by | VCID-zghf-77cd-aaaj | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/pcre.symbols/CVE-2016-3191.yml | 34.0.0rc1 |