Skip to content
OpenAdvisories
Unscored DSA-1399-1 7 CVEs

pcre3 - arbitrary code execution

Published Nov 5, 2007 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.1 pcre3 4.5+7.4-1
Debian · 4.0 pcre3 6.7+7.4-2

Vulnerabilities 7

  • Unscored —

    Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of se…

  • Unscored —

    Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multipl…

  • Unscored —

    Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matching certain input bytes again…

  • Unscored —

    Perl-Compatible Regular Expression (PCRE) library before 7.3 reads past the end of the string when searching for unmatc…

  • Unscored —

    Multiple integer overflows in Perl-Compatible Regular Expression (PCRE) library before 7.3 allow context-dependent atta…

  • Unscored —

    Perl-Compatible Regular Expression (PCRE) library before 7.3 does not properly compute the length of (1) a \p sequence,…

  • Unscored —

    Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent att…