PCRE up to 8.35 ))* Regex Pattern memory corruption

Summaryinfo

A vulnerability was found in PCRE up to 8.35 and classified as critical. Impacted is an unknown function of the file /(((a)|(a*)\g&lt/-1&gt/))*/. Such manipulation with the input /(((a)|(a*)\g<-1>))*/ as part of Regex Pattern leads to memory corruption. This vulnerability is referenced as CVE-2015-2327. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability was found in PCRE up to 8.35 (Programming Tool Software). It has been rated as critical. Affected by this issue is an unknown code of the file /(((a\2)|(a*)\g&lt/-1&gt/))*/. The manipulation with the input value /(((a\2)|(a*)\g<-1>))*/ leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability. CVE summarizes:

PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern and related patterns with certain internal recursive back references, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

The weakness was published 12/02/2015 (Website). The advisory is available at jira.mongodb.org. This vulnerability is handled as CVE-2015-2327. The attack may be launched remotely. No form of authentication is required for exploitation. Technical details are known, but there is no available exploit. Issue got demonstrated by a JavaScript RegExp object encountered by Konqueror.

The commercial vulnerability scanner Qualys is able to test this issue with plugin 196440 (Ubuntu Security Notification for pcre3 vulnerabilities (USN-2943-1)).

Upgrading to version 8.36 eliminates this vulnerability.

Similar entries are available at VDB-75660, VDB-79371, VDB-79376 and VDB-79377. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Programming Tool Software

Name

• PCRE

Version

• 8.0
• 8.1
• 8.2
• 8.3
• 8.4
• 8.5
• 8.6
• 8.7
• 8.8
• 8.9
• 8.10
• 8.11
• 8.12
• 8.13
• 8.14
• 8.15
• 8.16
• 8.17
• 8.18
• 8.19
• 8.20
• 8.21
• 8.22
• 8.23
• 8.24
• 8.25
• 8.26
• 8.27
• 8.28
• 8.29
• 8.30
• 8.31
• 8.32
• 8.33
• 8.34
• 8.35

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion