CVE-2015-8383 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Perl Compatible Regular Expression Library
Severity
9.8CRITICALNVD
EPSS
2.3%
top 15.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 2
Latest updateMay 14
Description
PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9
Affected Packages2 packages
Also affects: Fedora 22
🔴Vulnerability Details
3📋Vendor Advisories
3💬Community
5Bugzilla
▶
Bugzilla▶
CVE-2015-8383 mingw-pcre: pcre: Buffer overflow caused by repeated conditional group [epel-7]↗2015-12-02
Bugzilla▶
CVE-2015-8383 glib2: pcre: Buffer overflow caused by repeated conditional group [fedora-all]↗2015-12-02
Bugzilla▶
CVE-2015-8383 mingw-pcre: pcre: Buffer overflow caused by repeated conditional group [fedora-all]↗2015-12-02
Bugzilla
▶