CVE:CVE-2016-1283
CNNVD:CNNVD-201601-022
PCRE（Perl Compatible Regular Expressions）是软件开发者Philip Hazel所研发的一个使用C语言编写的开源正则表达式函数库。
PCRE 8.38版本的pcre_compile.c文件中的‘pcre_compile2’函数中存在安全漏洞，该漏洞源于程序没有正确处理‘/((?:F?+(?:^(?(R)a+"){99}-))(?J)(?'R'(?'R'&lt;((?'RR'(?'R'){97)?J)?J)(?'R'(?'R'){99|(:(?|(?'R')(k'R')|((?'R')))H'R'R)(H'R))))))/ ’及带有命名子组的相关模式。远程攻击者可借助特制的正则表达式利用该漏洞造成拒绝服务（基于堆的缓冲区溢出）。
solution:Upgrade pcre pcre to a higher version than 8.38,and avoid the version 8.38; Upgrade php php to a higher version than 5.6.32,7.0.25,7.1.11,and avoid the version [5.6.0,5.6.32),[7.0.0,7.0.25),[7.1.0,7.1.11); Upgrade fedoraproject fedora to a higher version than 22,23,and avoid the version 22,23; Upgrade oracle solaris to a higher version than 11.3,and avoid the version 11.3