Skip to content
OpenAdvisories
High WID-SEC-2023-1392 18 CVEs

PCRE (Perl Compatible Regular Expressions): Mehrere Schwachstellen

Published Dec 2, 2015 · Updated Oct 6, 2026 · Revision 25 · de-DE

Vendor: amazon Vendor: Blue Coat Vendor: Debian Vendor: F5 Vendor: IBM Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: ARX Product: BIG-IP Product: Db2 Product: Director Product: Enterprise Linux Product: Enterprise Linux Desktop Product: Enterprise Linux HPC Node Product: Enterprise Linux Workstation Product: Enterprise Manager Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: ProxySG Product: Tivoli Business Service Manager Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PCRE (Perl Compatible Regular Expressions) ausnutzen, um einen Denial of Service Angriff durchzuführen und um Informationen offen zu legen.

Product

Perl Compatible Regular Expressions (PCRE) ist eine Programmbibliothek zur Auswertung und Anwendung von regulären Ausdrücken.

Vulnerabilities 18

  • Unscored —
    CVE-2015-2327

    PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern and related patterns with certain internal recursive ba…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-2328

    PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows rem…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8380

    The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remot…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8381

    The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles t…

    pcre3 Debian
  • Unscored —
    CVE-2015-8382

    The match function in pcre_exec.c in PCRE before 8.37 mishandles the /(?:((abcd))|(((?:(?:(?:(?:abc|(?:abcdef))))b)abcd…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8383

    PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of ser…

    pcre3 Debian
  • Unscored —
    CVE-2015-8384

    PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns with certain recursive back refere…

    pcre3 Debian
  • Unscored —
    CVE-2015-8385

    PCRE before 8.38 mishandles the /(?|(\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, wh…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8386

    PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows r…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8387

    PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows remote attackers to caus…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8388

    PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing paren…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8389

    PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a …

    pcre3 Debian
  • Unscored —
    CVE-2015-8390

    PCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote attackers to cause a den…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8391

    The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote atta…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8392

    PCRE before 8.38 mishandles certain instances of the (?| substring, which allows remote attackers to cause a denial of …

    pcre3 Debian
  • Unscored —
    CVE-2015-8393

    pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain se…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8394

    PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote attackers to cause a den…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8395

    PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly …

    pcre3 Debian

Revision history

  1. #25

    Neue Updates von Debian aufgenommen

  2. #24

    Neue Updates von IBM aufgenommen

  3. #23

    Neue Updates von IBM aufgenommen

  4. #22

    Korrektur: Doppelte Referenz bereinigt

  5. #21

    Neue Updates von Amazon aufgenommen

  6. #20

    Neue Updates von Amazon aufgenommen

  7. #19

    Neue Updates von Amazon aufgenommen

  8. #18

    Neue Updates von Amazon aufgenommen

  9. #17

    New remediations available

  10. #16

    New remediations available

  11. #14

    New remediations available

  12. #15

    Version nicht vorhanden

  13. #13

    New remediations available

  14. #11

    New remediations available

  15. #12

    Version nicht vorhanden

  16. #10

    New remediations available

  17. #7

    New remediations available

  18. #8

    Version nicht vorhanden

  19. #9

    Version nicht vorhanden

  20. #5

    New remediations available

  21. #6

    Version nicht vorhanden

  22. #3

    New remediations available

  23. #4

    Version nicht vorhanden

  24. #1

    Initial Release

  25. #2

    Version nicht vorhanden

References