CVE-2015-8382

概要

参考情報

• git.php.net
• vcs.pcre.org/pcre/code/trunk/ChangeLog · Exploit
• vcs.pcre.org/pcre/code/trunk/pcre_exec.c
• openwall.com/lists/oss-security/2015/08/04/3
• openwall.com/lists/oss-security/2015/11/29/1
• securityfocus.com/bid/76157
• bto.bluecoat.com/security-advisory/sa128
• bugs.exim.org/show_bug.cgi · Exploit
• bugzilla.redhat.com/show_bug.cgi

perl compatible regular expression library のその他の脆弱性

• CVE-2015-8395高 7.5PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified othe…
• CVE-2015-8394緊急 9.8PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote attackers to cause a denial of service (integ…
• CVE-2015-8393高 7.5pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information v…
• CVE-2015-8392高 7.5PCRE before 8.38 mishandles certain instances of the (?| substring, which allows remote attackers to cause a denial of service (unintended r…
• CVE-2015-8390緊急 9.8PCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote attackers to cause a denial of service (unini…