CVE-2015-8385

2015-12-0201:59:00

CWE-119

[email protected]

web.nvd.nist.gov

pcre

cve-2015-8385

buffer overflow

denial of service

security vulnerability

nvd

regular expression

remote attackers

konqueror

javascript

7.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.4%

JSON

PCRE before 8.38 mishandles the /(?|(\k’Pm’)|(?‘Pm’))/ pattern and related patterns with certain forward references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

CPENameOperatorVersion
oracle:linuxoracle linuxeq7
pcre:perl_compatible_regular_expression_librarypcre perl compatible regular expression libraryle8.37