CVE-2016-3191

CWE-119 — Buffer OverflowCWE-121 — Stack-based Buffer Overflow8 documents8 sources
Severity
9.8CRITICAL
EPSS
11.3%
top 6.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Pcre Pcre2Pcre Pcre
Timeline
PublishedMar 17
Latest updateMay 14

Description

The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages4 packages

▶Debianpcre2< 10.21-1+3
▶NVDpcre/pcre210.21
▶Debianpcre3< 2:8.38-2+1
▶NVDpcre/pcre18 versions+17

🔴Vulnerability Details

3
GHSA
GHSA-68wg-f3j9-hgmv: The compile_branch function in pcre_compile↗2022-05-14
▶
CVEList
CVE-2016-3191: The compile_branch function in pcre_compile↗2016-03-17
▶
OSV
CVE-2016-3191: The compile_branch function in pcre_compile↗2016-03-17
▶

📋Vendor Advisories

3
Ubuntu
PCRE vulnerabilities↗2016-03-29
▶
Red Hat
pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)↗2016-02-09
▶
Debian
CVE-2016-3191: pcre2 - The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_...↗2016
▶

💬Community

1
Bugzilla
CVE-2016-3191 pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)↗2016-02-24
▶
CVE-2016-3191 (CRITICAL CVSS 9.8) | The compile_branch function in pcre | cvebase.io