CVE-2015-2327: Buffer Overflow
PCRE before 8.36 mishandles the /(((a\2)|(a)\g<-1>))/ pattern and related patterns with certain internal recursive back references, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2327?
CVE-2015-2327 has a severity rating that can lead to a denial of service due to a segmentation fault.
How do I fix CVE-2015-2327?
To fix CVE-2015-2327, upgrade to PCRE version 8.36 or later.
What causes the vulnerability in CVE-2015-2327?
CVE-2015-2327 is caused by mishandling of certain internal recursive back references in specific regular expression patterns.
Who can exploit CVE-2015-2327?
Remote attackers can exploit CVE-2015-2327 by sending crafted regular expressions to vulnerable PCRE versions.
What systems are affected by CVE-2015-2327?
CVE-2015-2327 affects systems using PCRE versions prior to 8.36.