CVE-2015-2326
Fixed in a distro release EPSS 2%
The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular expression with a group containing both a forward referencing subroutine call and a recursive back reference, as demonstrated by "((?+1)(\1))/".
Products: pcre, opensuse, mariadb, php
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pcre3 | 2:8.35-7.2 |
| Red Hat rhel software collections 2 | rh-php56 | 0:2.3-1.el6 |
| Red Hat rhel software collections 2 | rh-php56 | 0:2.3-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-bcmath | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-bcmath | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-cli | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-cli | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-common | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-common | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-dba | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-dba | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-dbg | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-dbg | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-debuginfo | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-debuginfo | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-devel | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-devel | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-embedded | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-embedded | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-enchant | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-enchant | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-fpm | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-fpm | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-gd | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-gd | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-gmp | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-gmp | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-imap | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-intl | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-intl | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-ldap | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-ldap | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-mbstring | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-mbstring | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-mysqlnd | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-mysqlnd | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-odbc | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-odbc | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-opcache | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-opcache | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-pdo | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-pdo | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-pear | 1:1.9.5-4.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-pear | 1:1.9.5-4.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-pgsql | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-pgsql | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-process | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-process | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-pspell | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-pspell | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-recode | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-recode | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-snmp | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-snmp | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-soap | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-soap | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-tidy | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-xml | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-xml | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-xmlrpc | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-xmlrpc | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-runtime | 0:2.3-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-runtime | 0:2.3-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-scldevel | 0:2.3-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-scldevel | 0:2.3-1.el6 |
| SUSE Linux Enterprise Desktop 12 | mariadb | 10.0.20-18.1 |
| SUSE Linux Enterprise Server 12 | mariadb | 10.0.20-18.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mariadb | 10.0.20-18.1 |
| SUSE Linux Enterprise Software Development Kit 12 | mariadb | 10.0.20-18.1 |
| SUSE Linux Enterprise Workstation Extension 12 | mariadb | 10.0.20-18.1 |
| Ubuntu 14.04 LTS | pcre3 | 1:8.31-2ubuntu2.1 |
| Ubuntu 14.04 LTS | pcre3 | 1:8.31-2ubuntu2.2 |
| openSUSE Tumbleweed | php5 | 5.6.28-1.1 |
| openSUSE Tumbleweed | php7 | 7.0.14-1.4 |