CVE-2015-8389

PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a denial of service (infinite recursion) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

• Fedora Project Fedora

  OS
  Fedoraproject
  22

• Pcre Perl Compatible Regular Expression Library

  APP
  Pcre
  ≤ 8.37

• PHP

  APP
  Php
  5.5.0 – 5.5.32 (bez)5.6.0 – 5.6.18 (bez)7.0.0 – 7.0.3 (bez)