CVE

Id
79604  
CVE No.
CVE-2015-2327  
Status
Candidate  
Description
PCRE before 8.36 mishandles the /(((a2)|(a*)g<-1>))*/ pattern and related patterns with certain internal recursive back references, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.  
Phase
Assigned (20150318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
722626 79604 CVE-2015-2327 MLIST:[oss-security] 20151128 Re: Heap Overflow in PCRE  View
722627 79604 CVE-2015-2327 URL:http://www.openwall.com/lists/oss-security/2015/11/29/1  View
722628 79604 CVE-2015-2327 MISC:http://www.fortiguard.com/advisory/FG-VD-15-010/  View
722629 79604 CVE-2015-2327 CONFIRM:http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup  View
722630 79604 CVE-2015-2327 CONFIRM:https://bugs.exim.org/show_bug.cgi?id=1503  View
722631 79604 CVE-2015-2327 CONFIRM:https://jira.mongodb.org/browse/SERVER-17252  View
722632 79604 CVE-2015-2327 BID:74924  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8305 JVNDB-2015-003625 複数の Microsoft Word および Office 製品における任意のコードを実行される脆弱性 複数の Microsoft Word 製品、Office 2010、および Office for Mac 2011 には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2015-2379 79604 9.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003625.html  View