CVE-2015-8380: Buffer Overflow
The pcreexec function in pcreexec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8380?
CVE-2015-8380 is a high-severity vulnerability that can cause a denial of service due to a heap-based buffer overflow.
How do I fix CVE-2015-8380?
To mitigate CVE-2015-8380, upgrade to PCRE version 8.38 or later.
What software is affected by CVE-2015-8380?
CVE-2015-8380 affects PCRE versions before 8.38 and Fedora version 22.
What type of attack can exploit CVE-2015-8380?
CVE-2015-8380 can be exploited by remote attackers through crafted regular expressions.
Can CVE-2015-8380 lead to any security implications other than denial of service?
While the primary concern of CVE-2015-8380 is a denial of service, it may also allow for unspecified other impacts.