| 0 |
|
| 1 |
|
| 2 |
| url |
VCID-2qwh-71ab-3qef |
| vulnerability_id |
VCID-2qwh-71ab-3qef |
| summary |
Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in PCRE and PCRE2 allows remote attackers to execute arbitrary code via a crafted regular expression. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2015-3210
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-2qwh-71ab-3qef |
|
| 3 |
| url |
VCID-2vkd-7m31-zue9 |
| vulnerability_id |
VCID-2vkd-7m31-zue9 |
| summary |
PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2015-8383
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-2vkd-7m31-zue9 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
| url |
VCID-4mdh-pxxx-57ef |
| vulnerability_id |
VCID-4mdh-pxxx-57ef |
| summary |
The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2016-1283
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-4mdh-pxxx-57ef |
|
| 9 |
|
| 10 |
|
| 11 |
| url |
VCID-7cc1-8j9m-87gj |
| vulnerability_id |
VCID-7cc1-8j9m-87gj |
| summary |
PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns with certain recursive back references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8392 and CVE-2015-8395. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2015-8384
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7cc1-8j9m-87gj |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
| url |
VCID-by6c-cfvh-4uev |
| vulnerability_id |
VCID-by6c-cfvh-4uev |
| summary |
PCRE before 8.38 mishandles the /(?|(\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2015-8385
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-by6c-cfvh-4uev |
|
| 18 |
| url |
VCID-c2g2-p2eq-mygx |
| vulnerability_id |
VCID-c2g2-p2eq-mygx |
| summary |
PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2015-8388
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-c2g2-p2eq-mygx |
|
| 19 |
| url |
VCID-d4wg-gtns-juf9 |
| vulnerability_id |
VCID-d4wg-gtns-juf9 |
| summary |
Improper Restriction of Operations within the Bounds of a Memory Buffer
The compile_branch function in pcre_compile.c in PCRE and pcre2_compile.c in PCRE2 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2016-3191
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-d4wg-gtns-juf9 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
| url |
VCID-g6q6-3k6s-vuey |
| vulnerability_id |
VCID-g6q6-3k6s-vuey |
| summary |
Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2015-5073
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-g6q6-3k6s-vuey |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
| url |
VCID-kd3m-s417-qkbr |
| vulnerability_id |
VCID-kd3m-s417-qkbr |
| summary |
Improper Restriction of Operations within the Bounds of a Memory Buffer
PCRE, and PCRE2 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2015-3217
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-kd3m-s417-qkbr |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
| 41 |
| url |
VCID-p1z2-yqe2-tqaf |
| vulnerability_id |
VCID-p1z2-yqe2-tqaf |
| summary |
The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles the /(?J:(?|(:(?|(?'R')(\k'R')|((?'R')))H'Rk'Rf)|s(?'R'))))/ and /(?J:(?|(:(?|(?'R')(\z(?|(?'R')(\k'R')|((?'R')))k'R')|((?'R')))H'Ak'Rf)|s(?'R')))/ patterns, and related patterns with certain group references, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2015-8381
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-p1z2-yqe2-tqaf |
|
| 42 |
| url |
VCID-p6s9-fmbe-bbdu |
| vulnerability_id |
VCID-p6s9-fmbe-bbdu |
| summary |
PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and CVE-2015-8392. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2015-8395
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-p6s9-fmbe-bbdu |
|
| 43 |
|
| 44 |
|
| 45 |
|
| 46 |
|
| 47 |
|
| 48 |
|
| 49 |
|
| 50 |
| url |
VCID-twye-41tq-hkcw |
| vulnerability_id |
VCID-twye-41tq-hkcw |
| summary |
PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2015-8386
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-twye-41tq-hkcw |
|
| 51 |
| url |
VCID-u7q1-w5yx-bfc3 |
| vulnerability_id |
VCID-u7q1-w5yx-bfc3 |
| summary |
The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2015-8391
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-u7q1-w5yx-bfc3 |
|
| 52 |
|
| 53 |
|
| 54 |
|
| 55 |
|
| 56 |
|
| 57 |
| url |
VCID-zfag-y22f-cfcp |
| vulnerability_id |
VCID-zfag-y22f-cfcp |
| summary |
PCRE before 8.38 mishandles certain instances of the (?| substring, which allows remote attackers to cause a denial of service (unintended recursion and buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and CVE-2015-8395. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2015-8392
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zfag-y22f-cfcp |
|