CVE-2015-8386 in PCRE

Resumen (Inglés)

PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

2015-12-01

Divulgación

2015-12-01

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
79382	PCRE Lookbehind Assertion desbordamiento de búfer	119	No está definido	Arreglo oficial	CVE-2015-8386

Fuentes

• MITRE
• NVD
• CVE Details