CVE-2015-5073: Buffer Overflow
Heap-based buffer overflow in the findfixedlength function in pcrecompile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis.
Other sources
Quoting http://www.openwall.com/lists/oss-security/2015/06/26/1:
""" PCRE is a regular expression C library inspired by the regular expression capabilities in the Perl programming language. The PCRE library is incorporated into a number of prominent programs, such as Adobe Flash, Apache, Nginx, PHP.
PCRE library is prone to a vulnerability which leads to Heap Overflow. During subpattern calculation of a malformed regular expression, an offset that is used as an array index is fully controlled and can be large enough so that unexpected heap memory regions are accessed. One could at least exploit this issue to read objects nearby of the affected application's memory. Such information discloure may also be used to bypass memory protection method such as ASLR.
Reference: https://bugs.exim.org/showbug.cgi?id=1651 """
The patch is available in the upstream bug:
https://bugs.exim.org/showbug.cgi?id=1651
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5073?
CVE-2015-5073 has a medium severity rating due to the potential for denial of service and information disclosure.
How do I fix CVE-2015-5073?
To fix CVE-2015-5073, update PCRE to version 8.38 or later.
What does CVE-2015-5073 affect?
CVE-2015-5073 affects the PCRE library versions prior to 8.38.
What type of vulnerability is CVE-2015-5073?
CVE-2015-5073 is a heap-based buffer overflow vulnerability.
Can CVE-2015-5073 bypass ASLR?
Yes, CVE-2015-5073 can potentially bypass the Address Space Layout Randomization (ASLR) protection mechanism.