Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-3217
HistoryDec 13, 2016 - 4:59 p.m.

CVE-2015-3217

2016-12-1316:59:02
CWE-119
[email protected]
web.nvd.nist.gov
8

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.2

Confidence

High

EPSS

0.014

Percentile

86.5%

JSON

PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\.|([^\\W_])?)+)+$/.

Affected configurations

Nvd
Node
pcrepcre2Match10.10
Node
pcrepcreMatch7.8
OR
pcrepcreMatch8.32
OR
pcrepcreMatch8.33
OR
pcrepcreMatch8.34
OR
pcrepcreMatch8.35
OR
pcrepcreMatch8.36
OR
pcrepcreMatch8.37
Node
ibmpowerkvmMatch2.1
OR
ibmpowerkvmMatch3.1
VendorProductVersionCPE
pcrepcre210.10cpe:2.3:a:pcre:pcre2:10.10:*:*:*:*:*:*:*
pcrepcre7.8cpe:2.3:a:pcre:pcre:7.8:*:*:*:*:*:*:*
pcrepcre8.32cpe:2.3:a:pcre:pcre:8.32:*:*:*:*:*:*:*
pcrepcre8.33cpe:2.3:a:pcre:pcre:8.33:*:*:*:*:*:*:*
pcrepcre8.34cpe:2.3:a:pcre:pcre:8.34:*:*:*:*:*:*:*
pcrepcre8.35cpe:2.3:a:pcre:pcre:8.35:*:*:*:*:*:*:*
pcrepcre8.36cpe:2.3:a:pcre:pcre:8.36:*:*:*:*:*:*:*
pcrepcre8.37cpe:2.3:a:pcre:pcre:8.37:*:*:*:*:*:*:*
ibmpowerkvm2.1cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*
ibmpowerkvm3.1cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*

Related

veracode 58
cve 1
debiancve 1
cvelist 1
prion 1
ibm 2
ubuntucve 1
nessus 17
freebsd 1
openvas 11
centos 1
redhat 3
oraclelinux 1
f5 2
suse 2
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:34:16
Denial Of Service (DoS)
2019-05-02 06:02:22
Denial Of Service (DoS)
2019-05-02 06:02:18
cve
cve
CVE-2015-3217
2016-12-13 16:59:02
debiancve
debiancve
CVE-2015-3217
2016-12-13 16:59:02
cvelist
cvelist
CVE-2015-3217
2016-12-13 16:00:00
prion
prion
Stack overflow
2016-12-13 16:59:00
ibm
ibm
Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by a vulnerabilty in PCRE (CVE-2015-3217)
2023-12-07 22:31:02
Security Bulletin: Multiple vulnerabilities in PCRE affect PowerKVM
2018-06-18 01:32:32
ubuntucve
ubuntucve
CVE-2015-3217
2016-12-13 00:00:00
nessus
nessus
FreeBSD : pcre -- multiple vulnerabilities (e69af246-0ae2-11e5-90e4-d050996490d0)
2015-06-08 00:00:00
EulerOS 2.0 SP2 : glib2 (EulerOS-SA-2020-1654)
2020-06-17 00:00:00
EulerOS 2.0 SP3 : glib2 (EulerOS-SA-2021-1789)
2021-04-30 00:00:00
freebsd
freebsd
pcre -- multiple vulnerabilities
2015-05-29 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2020-1654)
2020-06-16 00:00:00
Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2021-1789)
2021-05-03 00:00:00
RedHat Update for pcre RHSA-2016:1025-01
2016-06-03 00:00:00
centos
centos
pcre security update
2016-05-13 00:44:08
redhat
redhat
(RHSA-2016:1025) Important: pcre security update
2016-05-11 11:17:05
(RHSA-2016:1132) Important: rh-mariadb100-mariadb security update
2016-05-26 08:10:09
(RHSA-2016:2750) Moderate: rh-php56 security, bug fix, and enhancement update
2016-11-15 11:13:31
oraclelinux
oraclelinux
pcre security update
2016-05-11 00:00:00
f5
f5
K20225390 : Multiple PCRE vulnerabilities
2016-02-04 00:00:00
SOL20225390 - Multiple PCRE vulnerabilities
2016-02-04 00:00:00
suse
suse
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.2

Confidence

High

EPSS

0.014

Percentile

86.5%

JSON
Related for NVD:CVE-2015-3217
veracode58cve1debiancve1cvelist1prion1ibm2ubuntucve1nessus17freebsd1openvas11centos1redhat3oraclelinux1f52suse2