Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-3796
HistoryAug 17, 2015 - 12:00 a.m.

CVE-2015-3796

2015-08-1700:00:10
CWE-119
[email protected]
web.nvd.nist.gov
6

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.014

Percentile

86.3%

JSON

The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than CVE-2015-3797 and CVE-2015-3798.

Affected configurations

Nvd
Node
appleiphone_osRange≤8.4
Node
applemac_os_xRange≤10.10.4
VendorProductVersionCPE
appleiphone_os*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Related

cvelist 3
prion 3
nvd 3
cve 4
zdt 2
exploitdb 2
nessus 6
fedora 3
openvas 4
mageia 1
apple 2
securityvulns 4
cvelist
cvelist
CVE-2015-3797
2015-08-16 23:00:00
CVE-2015-3796
2015-08-16 23:00:00
CVE-2015-3798
2015-08-16 23:00:00
prion
prion
Memory corruption
2015-08-17 00:00:00
Memory corruption
2015-08-17 00:00:00
Memory corruption
2015-08-17 00:00:00
nvd
nvd
CVE-2015-3797
2015-08-17 00:00:11
CVE-2015-3798
2015-08-17 00:00:13
CVE-2015-5238
2020-07-21 18:15:19
cve
cve
CVE-2015-3798
2015-08-17 00:00:13
CVE-2015-3797
2015-08-17 00:00:11
CVE-2015-3796
2015-08-17 00:00:10
zdt
zdt
OS X Regex Engine (TRE) - Integer Signedness and Overflow Issues Vulnerability
2015-09-22 00:00:00
OS X Regex Engine (TRE) - Stack Buffer Overflow Vulnerability
2015-09-22 00:00:00
exploitdb
exploitdb
Apple Mac OSX Regex Engine (TRE) - Integer Signedness / Overflow
2015-09-22 00:00:00
Apple Mac OSX Regex Engine (TRE) - Stack Buffer Overflow (PoC)
2015-09-22 00:00:00
nessus
nessus
Fedora 24 : tre (2016-cd09eab674)
2016-11-15 00:00:00
Fedora 23 : tre (2016-0ff6c3d84b)
2016-11-15 00:00:00
Fedora 25 : tre (2016-0a952a3bc0)
2016-11-21 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: tre-0.8.0-18.20140228gitc2f5d13.fc24
2016-11-14 21:04:25
[SECURITY] Fedora 23 Update: tre-0.8.0-18.20140228gitc2f5d13.fc23
2016-11-14 23:53:54
[SECURITY] Fedora 25 Update: tre-0.8.0-18.20140228gitc2f5d13.fc25
2016-11-19 21:57:58
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0395)
2022-01-28 00:00:00
Fedora Update for tre FEDORA-2016-cd09eab674
2016-12-02 00:00:00
Fedora Update for tre FEDORA-2016-0a952a3bc0
2016-12-07 00:00:00
mageia
mageia
Updated tre packages fix security vulnerability
2016-11-22 01:18:01
apple
apple
About the security content of Apple TV 7.2.1 - Apple Support
2017-01-23 03:54:31
About the security content of Apple TV 7.2.1
2016-02-25 00:00:00
securityvulns
securityvulns
Apple iOS multiple security vulnerabilities
2015-08-17 00:00:00
APPLE-SA-2015-08-13-3 iOS 8.4.1
2015-08-17 00:00:00
Apple Mac OS X / OS X Server multiple security vulnerabilities
2015-08-17 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.014

Percentile

86.3%

JSON
Related for NVD:CVE-2015-3796
cvelist3prion3nvd3cve4zdt2exploitdb2nessus6fedora3openvas4mageia1apple2securityvulns4