CVE-2016-1283

🗓️ 03 Jan 2016 00:00:00Reported by Debian Security Bug TrackerType

The pcre_compile2 function in PCRE 8.38 mishandles crafted regular expressions, leading to denial of service or possibly other impact

Reporter	Title	Published	Views	Family All 98
ALT Linux	Security fix for the ALT Linux 10 package php8.1 version 7.1.11-alt1	3 Nov 201700:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package php7 version 7.1.11-alt1	3 Nov 201700:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package php8.0 version 7.1.11-alt1	3 Nov 201700:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in PCRE library affect IBM Tealeaf Customer Experience	16 Jun 201820:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security issues in IBM Tealeaf Customer Experience on Cloud Network Capture Add-On	16 Jun 201820:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Netezza SQL Extensions is vulnerable to an OpenSource PCRE Vulnerability (CVE-2016-1283, CVE-2016-3191)	18 Oct 201903:10	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in PCRE affects IBM Tivoli Network Manager IP Edition (CVE-2016-1283)	17 Jun 201815:29	–	ibm
FreeBSD	pcre -- heap overflow vulnerability	27 Feb 201600:00	–	freebsd
FreeBSD	PHP -- denial of service attack	26 Oct 201700:00	–	freebsd
Amazon	Important: php56, php70, php71	15 Nov 201700:00	–	amazon

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	any	pcre2	0	pcre2_0_any.deb
Debian	12	any	pcre2	0	pcre2_0_any.deb
Debian	13	any	pcre2	0	pcre2_0_any.deb
Debian	14	any	pcre2	0	pcre2_0_any.deb
Debian	999	any	pcre2	0	pcre2_0_any.deb
Debian	11	any	pcre3	2:8.38-3.1	pcre3_2:8.38-3.1_any.deb
Debian	12	any	pcre3	2:8.38-3.1	pcre3_2:8.38-3.1_any.deb

03 Jan 2016 00:00Current

9.3High risk

Vulners AI Score9.3

CVSS 27.5

CVSS 3.19.8

EPSS0.07791