Description
The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular expression with a group containing both a forward referencing subroutine call and a recursive back reference, as demonstrated by "((?+1)(\1))/".
Remediation
References
Related Vulnerabilities
MySQL CVE-2020-14829 Vulnerability (CVE-2020-14829)
Internet Information Services Other Vulnerability (CVE-1999-0450)
WordPress Plugin Email Subscriber Cross-Site Scripting (1.1)
WordPress Plugin Better Search Replace Cross-Site Request Forgery (1.3.2)
Joomla Improper Access Control Vulnerability (CVE-2016-9836)