Denial of Service Vulnerability in PCRE by Moonsoft
CVE-2015-8395

Currently unrated

Key Information:

Vendor

Pcre

Status
Perl Compatible Regular Expression Library
Vendor
CVE Published:
2 December 2015

What is CVE-2015-8395?

The vulnerability in PCRE prior to version 8.38 allows remote attackers to exploit mishandled references, potentially resulting in a denial of service. This issue can manifest through crafted regular expressions, as illustrated by scenarios involving JavaScript RegExp implementations in browsers like Konqueror. The exploitation even aligns with previously linked vulnerabilities, indicating a broader concern within the software's handling of regular expressions. Users are strongly advised to upgrade to the latest version to mitigate these risks.

References

http://www.openwall.com/lists/oss-security/2015/11/29/1
mailing-listx_refsource_MLIST
https://access.redhat.com/errata/RHSA-2016:1132
vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2750.html
vendor-advisoryx_refsource_REDHAT

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.