NetSight
IP …
critical9.8

CVE-2015-8391

The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU …

Impact

The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

Affected products

VendorProductAffected versions
PcrePcre
before 8.38
OracleLinux
Version 7
FedoraprojectFedora
Version 22
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Eus
Versions 7.2, 7.3, 7.4, 7.5, 7.6, 7.7
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 7.2, 7.3, 7.4, 7.6, 7.7
RedhatEnterprise Linux Server Tus
Versions 7.2, 7.3, 7.6, 7.7
RedhatEnterprise Linux Workstation
Version 7.0
PhpPhp
from 5.5.0 before 5.5.32
from 5.6.0 before 5.6.18
from 7.0.0 before 7.0.3

Weakness classification

CWE-119

References