CVE-2015-2328
02.12.2015, 01:59
PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.Enginsight
| Vendor | Product | Version |
|---|---|---|
| pcre | pcre | 𝑥 ≤ 8.35 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| mongodb |
| ||||||||||||||
| pcre2 |
| ||||||||||||||
| pcre3 |
|
Common Weakness Enumeration
References