CVE-2015-8388: Buffer Overflow
PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8388?
The severity of CVE-2015-8388 is considered to be high due to its potential to cause denial of service through buffer overflow.
How do I fix CVE-2015-8388?
To fix CVE-2015-8388, you should upgrade to PCRE version 8.38 or later, or apply patches provided by your software vendor.
Which software versions are affected by CVE-2015-8388?
CVE-2015-8388 affects PCRE versions up to and including 8.37 and Oracle Linux 7.
What type of attacks can CVE-2015-8388 facilitate?
CVE-2015-8388 can facilitate denial of service attacks through crafted regular expressions that cause buffer overflows.
Is CVE-2015-8388 exploitable remotely?
Yes, CVE-2015-8388 is exploitable remotely, allowing attackers to impact systems using vulnerable software.