CVE

Id
79605  
CVE No.
CVE-2015-2328  
Status
Candidate  
Description
PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.  
Phase
Assigned (20150318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
722633 79605 CVE-2015-2328 MLIST:[oss-security] 20151128 Re: Heap Overflow in PCRE  View
722634 79605 CVE-2015-2328 URL:http://www.openwall.com/lists/oss-security/2015/11/29/1  View
722635 79605 CVE-2015-2328 MISC:http://www.fortiguard.com/advisory/FG-VD-15-014/  View
722636 79605 CVE-2015-2328 CONFIRM:http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup  View
722637 79605 CVE-2015-2328 CONFIRM:https://bugs.exim.org/show_bug.cgi?id=1515  View
722638 79605 CVE-2015-2328 CONFIRM:https://jira.mongodb.org/browse/SERVER-17252  View
722639 79605 CVE-2015-2328 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
722640 79605 CVE-2015-2328 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886  View
722641 79605 CVE-2015-2328 BID:74924  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8306 JVNDB-2015-003626 複数の Microsoft Word 製品および Office 2010 における任意のコードを実行される脆弱性 複数の Microsoft Word 製品および Office 2010 には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2015-2380 79605 9.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003626.html  View