CVE-2015-8393: Infoleak
pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client.
Other sources
Upgraded bundled PCRE library to 8.38. (CVE-2015-8383, CVE-2015-8386, CVE-2015-8387, CVE-2015-8389, CVE-2015-8390, CVE-2015-8391, CVE-2015-8393, CVE-2015-8394)
— PHP
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8393?
CVE-2015-8393 is considered a medium-severity vulnerability due to potential information disclosure.
How do I fix CVE-2015-8393?
To fix CVE-2015-8393, upgrade the PCRE library to version 8.38 or later.
Which versions are affected by CVE-2015-8393?
CVE-2015-8393 affects PCRE versions prior to 8.38 as well as certain PHP versions up to 7.0.2.
What type of attack does CVE-2015-8393 facilitate?
CVE-2015-8393 allows remote attackers to obtain sensitive information via specially crafted binary files.
Is CVE-2015-8393 related to any other vulnerabilities?
Yes, CVE-2015-8393 is related to CVE-2015-8383 and CVE-2015-8386, which also involve issues in the PCRE library.