CVE-2015-3217

PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based…

published December 13, 2016

CVSS
—
EPSS
6%
Percentile
93.4
In the wild
Unconfirmed
What it is

PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\.|([^\\\\W_])?)+)+$/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06169 · 93.4th percentile
Published
2016-12-13T16:00Z
EPSS history
Timeline
  • 13 DEC 16:00Z
    PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based…
    cvelistv5