Lucene search

K
cvelistMitreCVELIST:CVE-2015-8388
HistoryDec 02, 2015 - 1:00 a.m.

CVE-2015-8388

2015-12-0201:00:00
mitre
www.cve.org
8

AI Score

9.7

Confidence

High

EPSS

0.016

Percentile

87.5%

PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.