CVE-2015-5073
13.12.2016, 16:59
Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | powerkvm | 2.1 |
| ibm | powerkvm | 3.1 |
| pcre | pcre | 𝑥 ≤ 8.37 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libpcre1 |
| ||||||||||||||||||||||||||||||||||||||
| libpcre1-32bit |
| ||||||||||||||||||||||||||||||||||||||
| libpcre16-0 |
| ||||||||||||||||||||||||||||||||||||||
| libpcrecpp0 |
| ||||||||||||||||||||||||||||||||||||||
| libpcrecpp0-32bit |
|
Red Hat Enterprise Linux Releases
Amazon Linux Releases
Amazon Package | |||
|---|---|---|---|
| glib2 |
| ||
| glib2-debuginfo |
| ||
| glib2-devel |
| ||
| glib2-doc |
| ||
| glib2-fam |
| ||
| pcre |
| ||
| pcre-debuginfo |
| ||
| pcre-devel |
| ||
| pcre-static |
| ||
| pcre-tools |
|
Common Weakness Enumeration
References