K17235: PCRE library vulnerability CVE-2015-3210

🗓️ 21 Feb 2023 20:00:02Reported by f5Type

f5🔗 my.f5.com👁 57 Views

PCRE library vulnerability CVE-2015-3210 Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression. Locally authenticated attacker may be able to execute arbitrary code in the context of the user running the affected application when the vulnerability is exploited. However, affected F5 products do not use the components in a way which exposes this vulnerability

Reporter	Title	Published	Views	Family All 131
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in PCRE library affect IBM Tealeaf Customer Experience	16 Jun 201820:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security issues in IBM Tealeaf Customer Experience on Cloud Network Capture Add-On	16 Jun 201820:01	–	ibm
IBM Security Bulletins	Security Bulletin:Multiple vulnerabilities in PCRE affect IBM Tivoli Network Manager IP Edition.	17 Jun 201815:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with the open source Perl Compatible Regular Expression (PCRE) library used in IBM Aspera Shares 1.9.2 and earlier	8 Dec 201804:55	–	ibm
ArchLinux	pcre: buffer overflow	5 Jun 201500:00	–	archlinux
CNVD	PCRE 'compile_regex()' Buffer Overflow Vulnerability	5 Jun 201500:00	–	cnvd
CVE	CVE-2015-3210	13 Dec 201616:00	–	cve
Cvelist	CVE-2015-3210	13 Dec 201616:00	–	cvelist
Debian CVE	CVE-2015-3210	13 Dec 201616:00	–	debiancve
Fedora	[SECURITY] Fedora 21 Update: pcre-8.35-12.fc21	18 Jul 201502:05	–	fedora