CVE-2015-8382

Name of the Vulnerable Software and Affected Versions PCRE versions prior to 8.37

Description The issue concerns the match function in pcre exec.c, which mishandles certain patterns involving (*ACCEPT), allowing remote attackers to obtain sensitive information from process memory or cause a denial of service due to partially initialized memory and application crash. This can be achieved via a crafted regular expression.

Recommendations For versions prior to 8.37, update to version 8.37 or later to resolve the issue.