CVE-2015-8380 The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly...
HighCVSS 7.5
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pcre3(Debian:12) | < 2:8.38-1 | 2:8.38-1 |
| PCRE perl compatible regular expression library | <= 8.37 | No fix listed |
| fedoraproject fedora | = 22 | No fix listed |
References
- Debian Security Tracker CVE-2015-8380 vendor-advisory
- FEDORA-2015-afafa29551 third-party-advisory vendor-advisory
- vcs.pcre.org exploit
- [oss-security] 20151128 Re: Heap Overflow in PCRE exploit mailing-list
- 77695 third-party-advisory vdb-entry
- blog.fuzzing-project.org third-party-advisory
- bto.bluecoat.com third-party-advisory
- bugs.exim.org exploit
- GLSA-201607-02 vendor-advisory
- bugs.debian.org issue-tracking