CVE-2016-3191
Fixed in a distro release EPSS 8%
The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.4 | pcre | 8.38-r1 |
| Debian 12 | pcre2 | 10.21-1 |
| Debian 12 | pcre3 | 2:8.38-2 |
| Debian 13 | pcre2 | 10.21-1 |
| Debian 14 | pcre2 | 10.21-1 |
| Debian 6.0 | pcre3 | 8.02-1.1+deb6u1 |
| Red Hat Enterprise Linux 7 | pcre | 0:8.32-15.el7_2.1 |
| Red Hat Enterprise Linux 7 | pcre-debuginfo | 0:8.32-15.el7_2.1 |
| Red Hat Enterprise Linux 7 | pcre-devel | 0:8.32-15.el7_2.1 |
| Red Hat Enterprise Linux 7 | pcre-static | 0:8.32-15.el7_2.1 |
| Red Hat Enterprise Linux 7 | pcre-tools | 0:8.32-15.el7_2.1 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-bench | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-bench | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-common | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-common | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-config | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-config | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-debuginfo | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-debuginfo | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-devel | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-devel | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-errmsg | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-errmsg | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-oqgraph-engine | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-oqgraph-engine | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-server | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-server | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-test | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-test | 1:10.0.25-4.el6 |
| SUSE Linux Enterprise Desktop 12 SP1 | pcre | 8.39-7.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | pcre | 8.39-5.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | pcre | 8.39-5.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | pcre | 8.39-7.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP1 | pcre | 8.39-5.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP1 | pcre | 8.39-7.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP2 | pcre | 8.39-5.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP2 | pcre | 8.39-7.1 |
| SUSE Linux Enterprise Server 12 SP1 | pcre | 8.39-5.1 |
| SUSE Linux Enterprise Server 12 SP1 | pcre | 8.39-7.1 |
| SUSE Linux Enterprise Server 12 SP2 | pcre | 8.39-5.1 |
| SUSE Linux Enterprise Server 12 SP2 | pcre | 8.39-7.1 |
| SUSE Linux Enterprise Server 12-LTSS | pcre | 8.39-7.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | pcre | 8.39-5.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | pcre | 8.39-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | pcre | 8.39-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | pcre | 8.39-5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | pcre | 8.39-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | pcre | 8.39-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | pcre | 8.39-5.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | pcre | 8.39-5.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | pcre | 8.39-7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | pcre | 8.39-5.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | pcre | 8.39-7.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | pcre | 8.39-5.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | pcre | 8.39-7.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP2 | pcre | 8.39-5.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP2 | pcre | 8.39-7.1 |
| Ubuntu 14.04 LTS | pcre3 | 1:8.31-2ubuntu2.2 |