RHSA-2016:1025

Vulnerability from csaf_opensuse - Published: 2016-05-11 00:00 - Updated: 2026-09-20 10:56
Summary
security update for pcre
Severity
Important
Notes
Title of the patch: security update for pcre
Description of the patch: This security update provides a functional equivalent of RHSA-2016:1025. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2016:1025.
Patchnames: RHSA-2016:1025
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2015-2328
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2015-3217
7.5 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 7 products, the same list as for CVE-2015-2328
Threats
Impact moderate
CVE-2015-5073
9.1 (Critical)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Affected products
Recommended 7 products, the same list as for CVE-2015-2328
Threats
Impact low
CVE-2015-8385
Affected products
Recommended 7 products, the same list as for CVE-2015-2328
Threats
Impact critical
CVE-2015-8386
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 7 products, the same list as for CVE-2015-2328
Threats
Impact critical
CVE-2015-8388
Affected products
Recommended 7 products, the same list as for CVE-2015-2328
Threats
Impact critical
CVE-2015-8391
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 7 products, the same list as for CVE-2015-2328
Threats
Impact critical
CVE-2016-3191
3.7 (Low)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 7 products, the same list as for CVE-2015-2328
Threats
Impact low
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/r… self
https://www.suse.com/security/cve/CVE-2015-2328/ self
https://www.suse.com/security/cve/CVE-2015-3217/ self
https://www.suse.com/security/cve/CVE-2015-5073/ self
https://www.suse.com/security/cve/CVE-2015-8385/ self
https://www.suse.com/security/cve/CVE-2015-8386/ self
https://www.suse.com/security/cve/CVE-2015-8388/ self
https://www.suse.com/security/cve/CVE-2015-8391/ self
https://www.suse.com/security/cve/CVE-2016-3191/ self
https://www.suse.com/security/cve/CVE-2015-2328 external
https://bugzilla.suse.com/906574 external
https://bugzilla.suse.com/957600 external
https://www.suse.com/security/cve/CVE-2015-3217 external
https://bugzilla.suse.com/933878 external
https://bugzilla.suse.com/958373 external
https://www.suse.com/security/cve/CVE-2015-5073 external
https://bugzilla.suse.com/936227 external
https://www.suse.com/security/cve/CVE-2015-8385 external
https://bugzilla.suse.com/957598 external
https://bugzilla.suse.com/958373 external
https://www.suse.com/security/cve/CVE-2015-8386 external
https://bugzilla.suse.com/957598 external
https://bugzilla.suse.com/958373 external
https://www.suse.com/security/cve/CVE-2015-8388 external
https://bugzilla.suse.com/936227 external
https://bugzilla.suse.com/957598 external
https://bugzilla.suse.com/958373 external
https://www.suse.com/security/cve/CVE-2015-8391 external
https://bugzilla.suse.com/957598 external
https://bugzilla.suse.com/958373 external
https://www.suse.com/security/cve/CVE-2016-3191 external
https://bugzilla.suse.com/971741 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for pcre",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2016:1025.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2016:1025.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2016:1025",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2016_1025.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-2328 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-2328/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3217 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3217/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-5073 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-5073/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8385 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8385/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8386 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8386/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8388 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8388/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8391 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8391/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3191 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3191/"
      }
    ],
    "title": "security update for pcre",
    "tracking": {
      "current_release_date": "2026-09-20T10:56:49Z",
      "generator": {
        "date": "2016-05-11T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2016:1025",
      "initial_release_date": "2016-05-11T00:00:00Z",
      "revision_history": [
        {
          "date": "2016-05-11T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T10:56:49Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pcre-0:8.32-15.el7_2.1.i686",
                "product": {
                  "name": "pcre-0:8.32-15.el7_2.1.i686",
                  "product_id": "pcre-0:8.32-15.el7_2.1.i686",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:pcre:pcre:8.32:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/pcre@8.32-15.el7_2.1?arch=i686\u0026upstream=pcre-0:8.32-15.el7_2.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pcre-devel-0:8.32-15.el7_2.1.i686",
                "product": {
                  "name": "pcre-devel-0:8.32-15.el7_2.1.i686",
                  "product_id": "pcre-devel-0:8.32-15.el7_2.1.i686",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:pcre:pcre:8.32:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/pcre-devel@8.32-15.el7_2.1?arch=i686\u0026upstream=pcre-0:8.32-15.el7_2.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pcre-static-0:8.32-15.el7_2.1.i686",
                "product": {
                  "name": "pcre-static-0:8.32-15.el7_2.1.i686",
                  "product_id": "pcre-static-0:8.32-15.el7_2.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/pcre-static@8.32-15.el7_2.1?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pcre-0:8.32-15.el7_2.1.x86_64",
                "product": {
                  "name": "pcre-0:8.32-15.el7_2.1.x86_64",
                  "product_id": "pcre-0:8.32-15.el7_2.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:pcre:pcre:8.32:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/pcre@8.32-15.el7_2.1?arch=x86_64\u0026upstream=pcre-0:8.32-15.el7_2.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pcre-devel-0:8.32-15.el7_2.1.x86_64",
                "product": {
                  "name": "pcre-devel-0:8.32-15.el7_2.1.x86_64",
                  "product_id": "pcre-devel-0:8.32-15.el7_2.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:pcre:pcre:8.32:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/pcre-devel@8.32-15.el7_2.1?arch=x86_64\u0026upstream=pcre-0:8.32-15.el7_2.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pcre-static-0:8.32-15.el7_2.1.x86_64",
                "product": {
                  "name": "pcre-static-0:8.32-15.el7_2.1.x86_64",
                  "product_id": "pcre-static-0:8.32-15.el7_2.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/pcre-static@8.32-15.el7_2.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pcre-tools-0:8.32-15.el7_2.1.x86_64",
                "product": {
                  "name": "pcre-tools-0:8.32-15.el7_2.1.x86_64",
                  "product_id": "pcre-tools-0:8.32-15.el7_2.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:pcre:pcre:8.32:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/pcre-tools@8.32-15.el7_2.1?arch=x86_64\u0026upstream=pcre-0:8.32-15.el7_2.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pcre-0:8.32-15.el7_2.1.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686"
        },
        "product_reference": "pcre-0:8.32-15.el7_2.1.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pcre-0:8.32-15.el7_2.1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64"
        },
        "product_reference": "pcre-0:8.32-15.el7_2.1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pcre-devel-0:8.32-15.el7_2.1.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686"
        },
        "product_reference": "pcre-devel-0:8.32-15.el7_2.1.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pcre-devel-0:8.32-15.el7_2.1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64"
        },
        "product_reference": "pcre-devel-0:8.32-15.el7_2.1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pcre-static-0:8.32-15.el7_2.1.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686"
        },
        "product_reference": "pcre-static-0:8.32-15.el7_2.1.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pcre-static-0:8.32-15.el7_2.1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64"
        },
        "product_reference": "pcre-static-0:8.32-15.el7_2.1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pcre-tools-0:8.32-15.el7_2.1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
        },
        "product_reference": "pcre-tools-0:8.32-15.el7_2.1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-2328",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-2328"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-2328",
          "url": "https://www.suse.com/security/cve/CVE-2015-2328"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 906574 for CVE-2015-2328",
          "url": "https://bugzilla.suse.com/906574"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 957600 for CVE-2015-2328",
          "url": "https://bugzilla.suse.com/957600"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-11T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-2328"
    },
    {
      "cve": "CVE-2015-3217",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3217"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\\\.|([^\\\\\\\\W_])?)+)+$/.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3217",
          "url": "https://www.suse.com/security/cve/CVE-2015-3217"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 933878 for CVE-2015-3217",
          "url": "https://bugzilla.suse.com/933878"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 958373 for CVE-2015-3217",
          "url": "https://bugzilla.suse.com/958373"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-11T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-3217"
    },
    {
      "cve": "CVE-2015-5073",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-5073"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-5073",
          "url": "https://www.suse.com/security/cve/CVE-2015-5073"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 936227 for CVE-2015-5073",
          "url": "https://bugzilla.suse.com/936227"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-11T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-5073"
    },
    {
      "cve": "CVE-2015-8385",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8385"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PCRE before 8.38 mishandles the /(?|(\\k\u0027Pm\u0027)|(?\u0027Pm\u0027))/ pattern and related patterns with certain forward references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8385",
          "url": "https://www.suse.com/security/cve/CVE-2015-8385"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 957598 for CVE-2015-8385",
          "url": "https://bugzilla.suse.com/957598"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 958373 for CVE-2015-8385",
          "url": "https://bugzilla.suse.com/958373"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-11T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-8385"
    },
    {
      "cve": "CVE-2015-8386",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8386"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8386",
          "url": "https://www.suse.com/security/cve/CVE-2015-8386"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 957598 for CVE-2015-8386",
          "url": "https://bugzilla.suse.com/957598"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 958373 for CVE-2015-8386",
          "url": "https://bugzilla.suse.com/958373"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-11T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-8386"
    },
    {
      "cve": "CVE-2015-8388",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8388"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PCRE before 8.38 mishandles the /(?=di(?\u003c=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8388",
          "url": "https://www.suse.com/security/cve/CVE-2015-8388"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 936227 for CVE-2015-8388",
          "url": "https://bugzilla.suse.com/936227"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 957598 for CVE-2015-8388",
          "url": "https://bugzilla.suse.com/957598"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 958373 for CVE-2015-8388",
          "url": "https://bugzilla.suse.com/958373"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-11T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-8388"
    },
    {
      "cve": "CVE-2015-8391",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8391"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8391",
          "url": "https://www.suse.com/security/cve/CVE-2015-8391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 957598 for CVE-2015-8391",
          "url": "https://bugzilla.suse.com/957598"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 958373 for CVE-2015-8391",
          "url": "https://bugzilla.suse.com/958373"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-11T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-8391"
    },
    {
      "cve": "CVE-2016-3191",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3191"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
          "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
          "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3191",
          "url": "https://www.suse.com/security/cve/CVE-2016-3191"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 971741 for CVE-2016-3191",
          "url": "https://bugzilla.suse.com/971741"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-devel-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.i686",
            "SUSE Liberty Linux 7:pcre-static-0:8.32-15.el7_2.1.x86_64",
            "SUSE Liberty Linux 7:pcre-tools-0:8.32-15.el7_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-11T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-3191"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.