Heap-based Buffer Overflow in PCRE Library by Perforce
CVE-2015-3210
9.8CRITICAL
What is CVE-2015-3210?
A heap-based buffer overflow vulnerability exists in the PCRE library, specifically affecting versions 8.34 through 8.37 and PCRE2 10.10. This flaw allows remote attackers to execute arbitrary code by crafting specific regular expressions that exploit memory management weaknesses. Successful exploitation can compromise system integrity, enabling the execution of malicious code in the context of the vulnerable application. System administrators are advised to evaluate the risk and apply available security patches to mitigate potential threats.
References
EPSS Score
9% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved