CVE-2015-8381: Buffer Overflow
It was discovered that PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted regular expression. This issue is similar to CVE-2015-8384 and CVE-2015-8392.
Other sources
The compileregex function in pcrecompile.c in PCRE before 8.38 and pcre2compile.c in PCRE2 before 10.2x mishandles the /(?J:(?|(:(?|(?'R')(\k'R')|((?'R')))H'Rk'Rf)|s(?'R'))))/ and /(?J:(?|(:(?|(?'R')(\z(?|(?'R')(\k'R')|((?'R')))k'R')|((?'R')))H'Ak'Rf)|s(?'R')))/ patterns, and related patterns with certain group references, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8381?
CVE-2015-8381 has been classified as a medium severity vulnerability.
How do I fix CVE-2015-8381?
To fix CVE-2015-8381, upgrade PCRE to version 8.38 or later.
What software is affected by CVE-2015-8381?
CVE-2015-8381 affects PCRE versions before 8.38 and PCRE2 versions before 10.2x.
What types of attacks can exploit CVE-2015-8381?
CVE-2015-8381 can potentially be exploited through crafted regular expressions that trigger a denial of service.
Is CVE-2015-8381 a remote vulnerability?
CVE-2015-8381 is not classified as a remote vulnerability, but it can be exploited through local applications that use vulnerable regex patterns.