NVD

Id
28881  
Name
CVE-2015-8853  
Description
The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of service (infinite loop) via crafted utf-8 data, as demonstrated by "ax80."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-05-25  
Modified Date
2016-11-28  
Seq
2015-8853  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
152190 28881 CVE-2015-8853 FEDORA-2016-5a9313e4b4  View
152191 28881 CVE-2015-8853 http://perl5.git.perl.org/perl.git/commitdiff/22b433eff9a1ffa2454e18405a56650f07b385b5  View
152192 28881 CVE-2015-8853 [oss-security] 20160420 CVE Request: perl: denial-of-service / Regexp-matching "hangs" indefinitely on illegal input using binmode :utf8 using 100%CPU  View
152193 28881 CVE-2015-8853 [oss-security] 20160420 Re: CVE Request: perl: denial-of-service / Regexp-matching "hangs" indefinitely on illegal input using binmode :utf8 using 100%CPU  View
152194 28881 CVE-2015-8853 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
152195 28881 CVE-2015-8853 http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
152196 28881 CVE-2015-8853 86707  View
152197 28881 CVE-2015-8853 https://bugzilla.redhat.com/show_bug.cgi?id=1329106  View
152198 28881 CVE-2015-8853 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731  View
152199 28881 CVE-2015-8853 https://rt.perl.org/Public/Bug/Display.html?id=123562  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11867 JVNDB-2015-007187 Perl の regexec.c の複数の関数におけるサービス運用妨害 (DoS) の脆弱性 Perl の regexec.c の (1) S_reghop3、(2) S_reghop4、および (3) S_reghopmaybe3 関数には、サービス運用妨害 (無限ループ) 状態にされる脆弱性が存在します。 CVE-2015-8853 86078 CVE-2015-8853 28881 5 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007187.html 2015-09-16 2016-05-27 View