Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-8380
HistoryDec 02, 2015 - 1:59 a.m.

CVE-2015-8380

2015-12-0201:59:03
CWE-119
[email protected]
web.nvd.nist.gov
48
cve-2015-8380
pcre
denial of service
heap-based buffer overflow
nvd
security vulnerability
regular expression
remote attack

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.5 High

AI Score

Confidence

High

0.067 Low

EPSS

Percentile

93.9%

JSON

The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

Affected configurations

NVD
Node
pcreperl_compatible_regular_expression_libraryRange≤8.37
Node
fedoraprojectfedoraMatch22

Related

prion 1
nvd 1
fedora 1
debiancve 1
cvelist 1
nessus 12
ubuntucve 1
ibm 5
openvas 9
f5 2
symantec 1
gentoo 1
rosalinux 1
openwrt 1
ubuntu 1
suse 2
prion
prion
Heap overflow
2015-12-02 01:59:00
nvd
nvd
CVE-2015-8380
2015-12-02 01:59:03
fedora
fedora
[SECURITY] Fedora 22 Update: pcre-8.37-7.fc22
2015-12-12 01:58:34
debiancve
debiancve
CVE-2015-8380
2015-12-02 01:59:03
cvelist
cvelist
CVE-2015-8380
2015-12-02 01:00:00
nessus
nessus
Fedora 22 : pcre-8.37-7.fc22 (2015-afafa29551)
2016-03-04 00:00:00
EulerOS 2.0 SP3 : pcre (EulerOS-SA-2018-1167)
2018-06-28 00:00:00
EulerOS 2.0 SP2 : pcre (EulerOS-SA-2019-1733)
2019-07-22 00:00:00
ubuntucve
ubuntucve
CVE-2015-8380
2015-12-01 00:00:00
ibm
ibm
Security Bulletin: IBM Netezza SQL Extensions is vulnerable to an OpenSource PCRE Vulnerability (CVE-2015-8380, CVE-2015-8382, CVE-2015-8391)
2019-10-18 03:10:29
Security Bulletin: Multiple vulnerabilities with the open source Perl Compatible Regular Expression (PCRE) libraries used in IBM Aspera Shares Application
2018-06-15 07:08:32
Security Bulletin: Multiple vulnerabilities Perl Compatible Regular Expression (PCRE) libraries - IBM Aspera Shares Application
2019-07-10 10:10:01
openvas
openvas
Huawei EulerOS: Security Advisory for pcre (EulerOS-SA-2019-1733)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for pcre (EulerOS-SA-2018-1167)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for pcre (EulerOS-SA-2019-1558)
2020-01-23 00:00:00
f5
f5
SOL20225390 - Multiple PCRE vulnerabilities
2016-02-04 00:00:00
K20225390 : Multiple PCRE vulnerabilities
2016-02-04 00:00:00
symantec
symantec
SA128 : Multiple PCRE Vulnerabilities
2016-07-07 08:00:00
gentoo
gentoo
libpcre: Multiple Vulnerabilities
2016-07-09 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1947
2021-07-02 17:40:57
openwrt
openwrt
pcre: Security update (18 CVEs)
2016-01-28 12:40:02
ubuntu
ubuntu
PCRE vulnerabilities
2016-03-29 00:00:00
suse
suse
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.5 High

AI Score

Confidence

High

0.067 Low

EPSS

Percentile

93.9%

JSON
Related for CVE-2015-8380
prion1nvd1fedora1debiancve1cvelist1nessus12ubuntucve1ibm5openvas9f52symantec1gentoo1rosalinux1openwrt1ubuntu1suse2