CVE-2015-8391: Buffer Overflow
It was discovered that pcrecompile function in pcrecompile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression.
Other sources
The pcrecompile function in pcrecompile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
— MITRE
Upgraded bundled PCRE library to 8.38. (CVE-2015-8383, CVE-2015-8386, CVE-2015-8387, CVE-2015-8389, CVE-2015-8390, CVE-2015-8391, CVE-2015-8393, CVE-2015-8394)
— PHP
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8391?
CVE-2015-8391 has a severity level classified as a denial of service vulnerability that can lead to high CPU consumption.
How do I fix CVE-2015-8391?
To fix CVE-2015-8391, upgrade to PCRE version 8.38 or later.
What software is affected by CVE-2015-8391?
CVE-2015-8391 affects PCRE versions prior to 8.38 and certain versions of PHP up to 7.0.3.
Can CVE-2015-8391 be exploited remotely?
Yes, CVE-2015-8391 can be exploited remotely by sending crafted regular expressions.
What impact can CVE-2015-8391 have on systems?
CVE-2015-8391 can lead to denial of service due to high CPU consumption, potentially affecting system availability.