CVE-2015-8395: Buffer Overflow
Published Dec 2, 2015
·Updated
PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and CVE-2015-8392.
Affected Software
1 affected component
PCRE Perl Compatible Regular Expression Library<=8.37
Event History
Dec 2, 2015
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8395?
CVE-2015-8395 has a severity rating that indicates it may lead to denial of service attacks.
2
How do I fix CVE-2015-8395?
To fix CVE-2015-8395, upgrade to PCRE version 8.38 or later.
3
What vulnerabilities are related to CVE-2015-8395?
CVE-2015-8395 is related to CVE-2015-8384 and shares similar impacts.
4
What systems are affected by CVE-2015-8395?
CVE-2015-8395 affects PCRE versions prior to 8.38.
5
Can CVE-2015-8395 be exploited remotely?
Yes, CVE-2015-8395 can be exploited remotely through crafted regular expressions.