| Name | CVE-2015-8381 |
| Description | The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles the /(?J:(?|(:(?|(?'R')(\k'R')|((?'R')))H'Rk'Rf)|s(?'R'))))/ and /(?J:(?|(:(?|(?'R')(\z(?|(?'R')(\k'R')|((?'R')))k'R')|((?'R')))H'Ak'Rf)|s(?'R')))/ patterns, and related patterns with certain group references, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| Debian Bugs | 795539, 796762 |
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| pcre3 (PTS) | jessie | 2:8.35-3.3+deb8u4 | fixed |
| stretch | 2:8.39-3 | fixed | |
| buster | 2:8.39-12 | fixed | |
| bullseye | 2:8.39-13 | fixed | |
| bookworm | 2:8.39-15 | fixed | |
| sid | 2:8.39-15.1 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| pcre3 | source | squeeze | (not affected) | |||
| pcre3 | source | wheezy | (not affected) | |||
| pcre3 | source | jessie | 2:8.35-3.3+deb8u2 | |||
| pcre3 | source | (unstable) | 2:8.38-1 | 795539, 796762 |
[wheezy] - pcre3 <not-affected> (Vulnerable code introduced later)
[squeeze] - pcre3 <not-affected> (Vulnerable code introduced later)
https://bugs.exim.org/show_bug.cgi?id=1672
http://vcs.pcre.org/pcre?view=revision&revision=1594
https://www.openwall.com/lists/oss-security/2015/08/24/1
https://bugs.exim.org/show_bug.cgi?id=1667
https://www.openwall.com/lists/oss-security/2015/08/05/3
http://vcs.pcre.org/pcre?view=revision&revision=1585
https://bugzilla.redhat.com/show_bug.cgi?id=1250943