Description
PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
Remediation
References
Related Vulnerabilities
Perl Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2018-12015)
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-2327)
MySQL CVE-2021-2300 Vulnerability (CVE-2021-2300)
WordPress Plugin Eyes Only:User Access Shortcode Cross-Site Scripting (1.8.2)