Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2015-8380
HistoryDec 01, 2015 - 12:00 a.m.

CVE-2015-8380

2015-12-0100:00:00
ubuntu.com
ubuntu.com
9

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.067 Low

EPSS

Percentile

93.7%

JSON

The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a //
pattern with a \01 string, which allows remote attackers to cause a denial
of service (heap-based buffer overflow) or possibly have unspecified other
impact via a crafted regular expression, as demonstrated by a JavaScript
RegExp object encountered by Konqueror.

Bugs

Notes

Author Note
tyhicks Issue affects PCRE3 only Marking ‘low’ since it requires PCRE to operate on untrusted regular expressions which is not very likely
mdeslaur 0001-Fix-overflow-when-ovector-has-size-1.patch in jessie
OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchpcre3< 1:8.31-2ubuntu2.2UNKNOWN
ubuntu15.10noarchpcre3< 2:8.35-7.1ubuntu1.3UNKNOWN

Related

prion 1
fedora 1
cve 1
debiancve 1
nessus 11
ibm 5
openvas 9
f5 2
symantec 1
openwrt 1
rosalinux 1
gentoo 1
ubuntu 1
suse 2
prion
prion
Heap overflow
2015-12-02 01:59:00
fedora
fedora
[SECURITY] Fedora 22 Update: pcre-8.37-7.fc22
2015-12-12 01:58:34
cve
cve
CVE-2015-8380
2015-12-02 01:59:00
debiancve
debiancve
CVE-2015-8380
2015-12-02 01:59:00
nessus
nessus
Fedora 22 : pcre-8.37-7.fc22 (2015-afafa29551)
2016-03-04 00:00:00
EulerOS 2.0 SP3 : pcre (EulerOS-SA-2018-1167)
2018-06-28 00:00:00
EulerOS 2.0 SP2 : pcre (EulerOS-SA-2019-1733)
2019-07-22 00:00:00
ibm
ibm
Security Bulletin: IBM Netezza SQL Extensions is vulnerable to an OpenSource PCRE Vulnerability (CVE-2015-8380, CVE-2015-8382, CVE-2015-8391)
2019-10-18 03:10:29
Security Bulletin: Multiple vulnerabilities Perl Compatible Regular Expression (PCRE) libraries - IBM Aspera Shares Application
2019-07-10 10:10:01
Security Bulletin: Multiple vulnerabilities with the open source Perl Compatible Regular Expression (PCRE) libraries used in IBM Aspera Shares Application
2018-06-15 07:08:32
openvas
openvas
Huawei EulerOS: Security Advisory for pcre (EulerOS-SA-2019-1733)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for pcre (EulerOS-SA-2018-1167)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for pcre (EulerOS-SA-2019-1558)
2020-01-23 00:00:00
f5
f5
SOL20225390 - Multiple PCRE vulnerabilities
2016-02-04 00:00:00
K20225390 : Multiple PCRE vulnerabilities
2016-02-04 00:00:00
symantec
symantec
SA128 : Multiple PCRE Vulnerabilities
2016-07-07 08:00:00
openwrt
openwrt
pcre: Security update (18 CVEs)
2016-01-28 12:40:02
rosalinux
rosalinux
Advisory ROSA-SA-2021-1947
2021-07-02 17:40:57
gentoo
gentoo
libpcre: Multiple Vulnerabilities
2016-07-09 00:00:00
ubuntu
ubuntu
PCRE vulnerabilities
2016-03-29 00:00:00
suse
suse
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.067 Low

EPSS

Percentile

93.7%

JSON
Related for UB:CVE-2015-8380
prion1fedora1cve1debiancve1nessus11ibm5openvas9f52symantec1openwrt1rosalinux1gentoo1ubuntu1suse2