CVE-2015-8381

Name	CVE-2015-8381
Description	The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles the /(?J:(?\|(:(?\|(?'R')(\k'R')\|((?'R')))H'Rk'Rf)\|s(?'R'))))/ and /(?J:(?\|(:(?\|(?'R')(\z(?\|(?'R')(\k'R')\|((?'R')))k'R')\|((?'R')))H'Ak'Rf)\|s(?'R')))/ patterns, and related patterns with certain group references, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	795539, 796762

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
pcre3 (PTS)	bullseye	2:8.39-13	fixed
	bookworm	2:8.39-15	fixed
	sid	2:8.39-15.1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Debian Bugs
pcre3	source	squeeze	(not affected)
pcre3	source	wheezy	(not affected)
pcre3	source	jessie	2:8.35-3.3+deb8u2
pcre3	source	(unstable)	2:8.38-1	795539, 796762

Notes

[wheezy] - pcre3 <not-affected> (Vulnerable code introduced later)
[squeeze] - pcre3 <not-affected> (Vulnerable code introduced later)
https://bugs.exim.org/show_bug.cgi?id=1672
http://vcs.pcre.org/pcre?view=revision&revision=1594
https://www.openwall.com/lists/oss-security/2015/08/24/1
https://bugs.exim.org/show_bug.cgi?id=1667
https://www.openwall.com/lists/oss-security/2015/08/05/3
http://vcs.pcre.org/pcre?view=revision&revision=1585
https://bugzilla.redhat.com/show_bug.cgi?id=1250943