CVE-2015-8384: Buffer Overflow
PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns with certain recursive back references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8392 and CVE-2015-8395.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8384?
CVE-2015-8384 has a high severity rating due to the potential for denial of service through a buffer overflow.
How do I fix CVE-2015-8384?
To fix CVE-2015-8384, upgrade to PCRE version 8.38 or later.
What types of attacks can result from CVE-2015-8384?
CVE-2015-8384 can be exploited by remote attackers to cause denial of service via crafted regular expressions.
Which software is affected by CVE-2015-8384?
CVE-2015-8384 affects PCRE versions prior to 8.38.
Is CVE-2015-8384 related to regex patterns?
Yes, CVE-2015-8384 is specifically associated with mishandling of certain recursive back reference patterns in regular expressions.