CVE-2015-8383

Critical

Published: 02/12/2015(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

PCRE before 8.38 mishandles certain repeated conditional groups, allowing remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression.

Risk Assessment

Organizations may be exposed to attacks leading to denial of service, impacting the availability of their systems.

Recommendation

It is recommended to upgrade to PCRE version 8.38 or later to mitigate this vulnerability.

Original NVD description (English source)

PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.