Perl Compatible Regular Expression Library vulnerabilities

Product

Perl Compatible Regular Expression Library

by Pcre · last CVE Dec 2, 2015

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 5High 2Medium 0Low 0

Severity

Exploitation

Watch

Add Perl Compatible Regular Expression Library to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2015-8393	7.5	4%	Dec 2	pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a… Affected: through 8.37
CVE-2015-8387	7.3	4%	Dec 2	PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows remote attackers to cause a denial of service (integer overflow) or possibly have… Affected: through 8.37