vulnerability
Oracle Linux: CVE-2015-3217: ELSA-2016-1025: pcre security update (IMPORTANT)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:N/I:N/A:C) | May 11, 2016 | May 11, 2016 | Nov 29, 2024 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
May 11, 2016
Added
May 11, 2016
Modified
Nov 29, 2024
Description
PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\.|([^\\\\W_])?)+)+$/.
Solutions
oracle-linux-upgrade-pcreoracle-linux-upgrade-pcre-develoracle-linux-upgrade-pcre-staticoracle-linux-upgrade-pcre-tools
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.