Perl-Compatible Regular Expression contains a flaw that may allow a denial of service. The issue is triggered when handling a subpattern that was called recursively, and will result in an infinite loop. This will cause a loss of availability for the program.
Classification
Location:
Context Dependent
Attack Type:
Denial of Service,
Input Manipulation
Impact:
Loss of Availability
Solution:
Upgrade
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified
Solution
Upgrade to version 8.20 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
