CVE-2015-8395 — Classic Buffer Overflow in Perl Compatible Regular Expression Library

CWE-120 — Classic Buffer OverflowCWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-122 — Heap-based Buffer Overflow14 documents8 sources
Severity
7.5HIGHNVD
EPSS
2.4%
top 14.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Pcre Perl Compatible Regular Expression Library
Timeline
PublishedDec 2
Latest updateMay 14

Description

PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and CVE-2015-8392.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

3
GHSA
GHSA-vpj5-f38f-q927: PCRE before 8↗2022-05-14
▶
OSV
CVE-2015-8395: PCRE before 8↗2015-12-02
▶
CVEList
CVE-2015-8395: PCRE before 8↗2015-12-02
▶

📋Vendor Advisories

5
Ubuntu
PCRE vulnerabilities↗2016-03-29
▶
Red Hat
pcre: Buffer overflow caused by duplicate named references (8.38/36)↗2015-11-23
▶
Red Hat
pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)↗2015-11-23
▶
Red Hat
pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27)↗2015-11-23
▶
Debian
CVE-2015-8395: pcre3 - PCRE before 8.38 mishandles certain references, which allows remote attackers to...↗2015
▶

💬Community

5
Bugzilla
CVE-2015-8395 mingw-pcre: pcre: Buffer overflow caused by certain references [fedora-all]↗2015-12-02
▶
Bugzilla
CVE-2015-8395 mingw-pcre: pcre: Buffer overflow caused by certain references [epel-7]↗2015-12-02
▶
Bugzilla
CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)↗2015-12-02
▶
Bugzilla
CVE-2015-8395 glib2: pcre: Buffer overflow caused by certain references [fedora-all]↗2015-12-02
▶
Bugzilla
CVE-2015-8395 pcre: Buffer overflow caused by certain references [fedora-all]↗2015-12-02
▶
CVE-2015-8395 — Classic Buffer Overflow | cvebase