CVE-2015-8388

EPSS 4.2%
發布日:2015/12/2修改日:2026/4/28

描述

PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

受影響套件(1)

參考連結(1)