| Package | Affected versions | Patched versions |
|---|---|---|
| powerkvm | = 2.1= 3.1 | |
| pcre | ≤ 8.37 |
Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free