CVE-2014-9769
Fixed in a distro release EPSS 2%
pcre_jit_compile.c in PCRE 8.35 does not properly use table jumps to optimize nested alternatives, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a crafted string, as demonstrated by packets encountered by Suricata during use of a regular expression in an Emerging Threats Open ruleset.
Products: pcre
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pcre3 | 2:8.38-1 |
| Ubuntu 14.04 LTS | pcre3 | 1:8.31-2ubuntu2.2 |