CVE-2015-2327
02.12.2015, 01:59
PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern and related patterns with certain internal recursive back references, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| pcre | perl_compatible_regular_expression_library | 𝑥 ≤ 8.35 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| mongodb |
| ||||||||||||||
| pcre2 |
| ||||||||||||||
| pcre3 |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libpcre1 |
| ||||||||||||||||||||||||||||||||||||||
| libpcre1-32bit |
| ||||||||||||||||||||||||||||||||||||||
| libpcre16-0 |
| ||||||||||||||||||||||||||||||||||||||
| libpcrecpp0 |
| ||||||||||||||||||||||||||||||||||||||
| libpcrecpp0-32bit |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
References