CVE-2015-5073

Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
Affected Products (NVD)
VendorProductVersion
ibmpowerkvm
2.1
ibmpowerkvm
3.1
pcrepcre
𝑥
≤ 8.37
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
pcre3
bookworm
2:8.39-15
fixed
bullseye
2:8.39-13
fixed
sid
2:8.39-15.1
fixed
squeeze
no-dsa
wheezy
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
pcre3
precise
Fixed 8.12-4ubuntu0.1
released
trusty
Fixed 1:8.31-2ubuntu2.1
released
utopic
ignored
vivid
Fixed 2:8.35-3.3ubuntu1.1
released
wily
Fixed 2:8.35-7.1ubuntu1.3
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libpcre1
suse enterprise sap 12 SP1
8.39-7.1
fixed
suse enterprise sap 12 SP2
8.39-7.1
fixed
suse enterprise server 12
8.39-7.1
fixed
suse enterprise server 12 SP1
8.39-7.1
fixed
suse enterprise server 12 SP2
8.39-7.1
fixed
suse enterprise server 12 SP4
8.39-8.3.1
fixed
suse enterprise server 12 SP5
8.39-8.3.1
fixed
libpcre1-32bit
suse enterprise sap 12 SP1
8.39-7.1
fixed
suse enterprise sap 12 SP2
8.39-7.1
fixed
suse enterprise server 12
8.39-7.1
fixed
suse enterprise server 12 SP1
8.39-7.1
fixed
suse enterprise server 12 SP2
8.39-7.1
fixed
suse enterprise server 12 SP4
8.39-8.3.1
fixed
suse enterprise server 12 SP5
8.39-8.3.1
fixed
libpcre16-0
suse enterprise sap 12 SP1
8.39-7.1
fixed
suse enterprise sap 12 SP2
8.39-7.1
fixed
suse enterprise server 12
8.39-7.1
fixed
suse enterprise server 12 SP1
8.39-7.1
fixed
suse enterprise server 12 SP2
8.39-7.1
fixed
suse enterprise server 12 SP4
8.39-8.3.1
fixed
suse enterprise server 12 SP5
8.39-8.3.1
fixed
libpcrecpp0
suse enterprise desktop 12 SP1
8.39-7.1
fixed
suse enterprise desktop 12 SP2
8.39-7.1
fixed
suse enterprise desktop 12 SP3
8.39-7.1
fixed
suse enterprise desktop 12 SP4
8.39-8.3.1
fixed
suse enterprise sap 12 SP1
8.39-7.1
fixed
suse enterprise sap 12 SP2
8.39-7.1
fixed
suse enterprise sap 12 SP3
8.39-7.1
fixed
suse enterprise sap 12 SP4
8.39-8.3.1
fixed
suse enterprise sap 12 SP5
8.39-7.1
fixed
suse enterprise server 12 SP1
8.39-7.1
fixed
suse enterprise server 12 SP2
8.39-7.1
fixed
suse enterprise server 12 SP3
8.39-7.1
fixed
suse enterprise server 12 SP4
8.39-8.3.1
fixed
suse enterprise server 12 SP5
8.39-7.1
fixed
suse enterprise workstation 12 SP1
8.39-7.1
fixed
suse enterprise workstation 12 SP2
8.39-7.1
fixed
suse enterprise workstation 12 SP3
8.39-7.1
fixed
suse enterprise workstation 12 SP4
8.39-8.3.1
fixed
suse enterprise workstation 12 SP5
8.39-7.1
fixed
libpcrecpp0-32bit
suse enterprise desktop 12 SP1
8.39-7.1
fixed
suse enterprise desktop 12 SP2
8.39-7.1
fixed
suse enterprise desktop 12 SP3
8.39-7.1
fixed
suse enterprise desktop 12 SP4
8.39-8.3.1
fixed
suse enterprise sap 12 SP1
8.39-7.1
fixed
suse enterprise sap 12 SP2
8.39-7.1
fixed
suse enterprise sap 12 SP3
8.39-7.1
fixed
suse enterprise sap 12 SP4
8.39-8.3.1
fixed
suse enterprise sap 12 SP5
8.39-7.1
fixed
suse enterprise server 12 SP1
8.39-7.1
fixed
suse enterprise server 12 SP2
8.39-7.1
fixed
suse enterprise server 12 SP3
8.39-7.1
fixed
suse enterprise server 12 SP4
8.39-8.3.1
fixed
suse enterprise server 12 SP5
8.39-7.1
fixed
suse enterprise workstation 12 SP1
8.39-7.1
fixed
suse enterprise workstation 12 SP2
8.39-7.1
fixed
suse enterprise workstation 12 SP3
8.39-7.1
fixed
suse enterprise workstation 12 SP4
8.39-8.3.1
fixed
suse enterprise workstation 12 SP5
8.39-7.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
pcre
RHEL 7
0:8.32-15.el7_2.1
fixed
pcre-devel
RHEL 7
0:8.32-15.el7_2.1
fixed
pcre-static
RHEL 7
0:8.32-15.el7_2.1
fixed
pcre-tools
RHEL 7
0:8.32-15.el7_2.1
fixed
Common Weakness Enumeration
References
http://rhn.redhat.com/errata/RHSA-2016-1025.html
http://rhn.redhat.com/errata/RHSA-2016-2750.html
http://vcs.pcre.org/pcre/code/trunk/ChangeLog?revision=1609&view=markup
http://vcs.pcre.org/pcre?view=revision&revision=1571
http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886
http://www.openwall.com/lists/oss-security/2015/06/26/1
http://www.openwall.com/lists/oss-security/2015/06/26/3
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
http://www.securityfocus.com/bid/75430
http://www.securitytracker.com/id/1033154
https://access.redhat.com/errata/RHSA-2016:1132
https://bugs.exim.org/show_bug.cgi?id=1651
https://security.gentoo.org/glsa/201607-02
http://rhn.redhat.com/errata/RHSA-2016-1025.html
http://rhn.redhat.com/errata/RHSA-2016-2750.html
http://vcs.pcre.org/pcre/code/trunk/ChangeLog?revision=1609&view=markup
http://vcs.pcre.org/pcre?view=revision&revision=1571
http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886
http://www.openwall.com/lists/oss-security/2015/06/26/1
http://www.openwall.com/lists/oss-security/2015/06/26/3
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
http://www.securityfocus.com/bid/75430
http://www.securitytracker.com/id/1033154
https://access.redhat.com/errata/RHSA-2016:1132
https://bugs.exim.org/show_bug.cgi?id=1651
https://security.gentoo.org/glsa/201607-02