PT-2015-7787 · Philip Hazel+4 · Pcre+4
CVE-2015-8386
·
Publicado
2015-12-01
·
Atualizado
2023-02-16
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PCRE versions prior to 8.38
Description
The issue concerns the mishandling of lookbehind assertions and mutually recursive subpatterns, allowing remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression. This can be demonstrated by a JavaScript RegExp object encountered by Konqueror.
Recommendations
For PCRE versions prior to 8.38, update to version 8.38 or later to resolve the issue.
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Pcre
Red Hat
Suse
Ubuntu