CVE-2015-2325: High severity pcre vulnerability
The compilebranch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large number of times within a repeated outer group that has a zero minimum quantifier.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2015-2325.
What is the severity of CVE-2015-2325?
The severity of CVE-2015-2325 is high with a CVSS score of 7.8.
Which software versions are affected by CVE-2015-2325?
The software versions affected by CVE-2015-2325 are PCRE before 8.37, OpenSUSE 13.1 and 13.2, MariaDB before 10.0.18, and PHP versions between 5.4.0 and 5.4.41, 5.5.0 and 5.5.26, and 5.6.0 and 5.6.9.
What is the impact of this vulnerability?
The impact of CVE-2015-2325 includes compiling incorrect code, causing a denial of service (out-of-bounds heap read and crash), and potentially having other unspecified impacts.
How can I fix CVE-2015-2325?
To fix CVE-2015-2325, it is recommended to update to a version of the affected software that is not vulnerable or apply any patches or security updates provided by the software vendor.