CVE-2015-8388
PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
- EPSS
- 6.6% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-119, CWE-185
- Published
- Modified
- Record from
- the NVD, synced
Affected
- oracle:linux
- pcre:perl_compatible_regular_expression_library