CVE-2015-8383

PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror...

CVE-2015-8392

PCRE before 8.38 mishandles certain instances of the ?| substring, which allows remote attackers to cause a denial of service unintended recursion and buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object...

CVE-2015-8380

The pcreexec function in pcreexec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegE...

CVE-2015-8395

PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and...

CVE-2015-8389

PCRE before 8.38 mishandles the /?:|a|100x/ pattern and related patterns, which allows remote attackers to cause a denial of service infinite recursion or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konquero...

CVE-2015-8391

The pcrecompile function in pcrecompile.c in PCRE before 8.38 mishandles certain : nesting, which allows remote attackers to cause a denial of service CPU consumption or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object...

CVE-2015-8390

PCRE before 8.38 mishandles the : and \ substrings in character classes, which allows remote attackers to cause a denial of service uninitialized memory read or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by...

CVE-2015-8385

PCRE before 8.38 mishandles the /?|\k'Pm'|?'Pm'/ pattern and related patterns with certain forward references, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript...

CVE-2015-2328

PCRE before 8.36 mishandles the /?Ra|?1+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object...

CVE-2015-8388

PCRE before 8.38 mishandles the /?=di?=?1|?=./ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript...

CVE-2015-8386

PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp...

PT-2015-5717

Name of the Vulnerable Software and Affected Versions PCRE versions prior to 8.36 Description The issue is related to the handling of certain internal recursive back references in regular expressions. Specifically, patterns like /a2|ag/ can cause a denial of service segmentation fault or possibly...

PT-2015-7789

Name of the Vulnerable Software and Affected Versions PCRE versions prior to 8.38 Description The issue concerns the mishandling of certain patterns, such as /?=di?=?1|?=./, which contain an unmatched closing parenthesis. This allows remote attackers to cause a denial of service, potentially...

PT-2015-7781

Name of the Vulnerable Software and Affected Versions PCRE versions prior to 8.38 Description The issue is related to the pcre exec function in pcre exec.c, which mishandles a // pattern with a 01 string. This can be exploited by remote attackers to cause a denial of service, specifically a...

PT-2015-7782

Name of the Vulnerable Software and Affected Versions PCRE versions prior to 8.38 PCRE2 versions prior to 10.2x Description The issue concerns the compile regex function in PCRE and PCRE2, which mishandles certain patterns, such as /?J:?|:?|?'R'k'R'|?'R'H'Rk'Rf|s?'R'/ and...

PT-2015-7783

Name of the Vulnerable Software and Affected Versions PCRE versions prior to 8.37 Description The issue concerns the match function in pcre exec.c, which mishandles certain patterns involving ACCEPT, allowing remote attackers to obtain sensitive information from process memory or cause a denial o...

CVE-2015-8384

PCRE before 8.38 mishandles the /?J?'d'?'d'\gd/ pattern and related patterns with certain recursive back references, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScri...

PT-2015-7786

Name of the Vulnerable Software and Affected Versions PCRE versions prior to 8.38 Description The issue concerns a denial of service buffer overflow that can be caused by remote attackers through crafted regular expressions. This can potentially have other unspecified impacts. The problem is...

UBUNTU-CVE-2015-8391

The pcrecompile function in pcrecompile.c in PCRE before 8.38 mishandles certain : nesting, which allows remote attackers to cause a denial of service CPU consumption or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object...

grep security update

CentOS Errata and Security Advisory CESA-2015:2111 Updated grep packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base...