SecuritySpace - CVE-2015-2326

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-2326

Description: The pcre_compile2 function in PCRE before 8.37 allows context- dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular expression with a group containing both a forward referencing subroutine call and a recursive back reference, as demonstrated by "((?+1)(\1))/".

Test IDs: 1.3.6.1.4.1.25623.1.0.120108 1.3.6.1.4.1.25623.1.0.120107

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-2326
http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html
https://bugs.exim.org/show_bug.cgi?id=1592
https://fortiguard.com/zeroday/FG-VD-15-016

CVE ID:	CVE-2015-2326
Description:	The pcre_compile2 function in PCRE before 8.37 allows context- dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular expression with a group containing both a forward referencing subroutine call and a recursive back reference, as demonstrated by "((?+1)(\1))/".
Test IDs:	1.3.6.1.4.1.25623.1.0.120108 1.3.6.1.4.1.25623.1.0.120107
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2326 http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html https://bugs.exim.org/show_bug.cgi?id=1592 https://fortiguard.com/zeroday/FG-VD-15-016