High severity7.8NVD Advisory· Published Jan 14, 2020· Updated Jun 17, 2026
CVE-2015-2325
CVE-2015-2325
Description
The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large number of times within a repeated outer group that has a zero minimum quantifier.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
24- PCRE/PCREdescription
- osv-coords22 versionspkg:rpm/opensuse/php5&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/php7&distro=openSUSE%20Tumbleweedpkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012pkg:rpm/suse/pcre&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1pkg:rpm/suse/pcre&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2pkg:rpm/suse/pcre&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP1pkg:rpm/suse/pcre&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP2pkg:rpm/suse/pcre&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1pkg:rpm/suse/pcre&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2pkg:rpm/suse/pcre&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSSpkg:rpm/suse/pcre&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2pkg:rpm/suse/pcre&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/pcre&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/pcre&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/pcre&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1pkg:rpm/suse/pcre&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2pkg:rpm/suse/pcre&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP1pkg:rpm/suse/pcre&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP2
< 5.6.28-1.1+ 21 more
- (no CPE)range: < 5.6.28-1.1
- (no CPE)range: < 7.0.14-1.4
- (no CPE)range: < 10.0.20-18.1
- (no CPE)range: < 10.0.20-18.1
- (no CPE)range: < 10.0.20-18.1
- (no CPE)range: < 10.0.20-18.1
- (no CPE)range: < 10.0.20-18.1
- (no CPE)range: < 8.39-5.1
- (no CPE)range: < 8.39-5.1
- (no CPE)range: < 8.39-5.1
- (no CPE)range: < 8.39-5.1
- (no CPE)range: < 8.39-5.1
- (no CPE)range: < 8.39-5.1
- (no CPE)range: < 8.39-7.1
- (no CPE)range: < 8.39-5.1
- (no CPE)range: < 8.39-7.1
- (no CPE)range: < 8.39-5.1
- (no CPE)range: < 8.39-5.1
- (no CPE)range: < 8.39-5.1
- (no CPE)range: < 8.39-5.1
- (no CPE)range: < 8.39-5.1
- (no CPE)range: < 8.39-5.1
Patches
Vulnerability mechanics
References
4- bugs.exim.org/show_bug.cginvdExploitIssue TrackingPermissions RequiredThird Party Advisory
- lists.opensuse.org/opensuse-updates/2015-05/msg00014.htmlnvdMailing ListThird Party Advisory
- fortiguard.com/zeroday/FG-VD-15-015nvdThird Party Advisory
- www.pcre.org/original/changelog.txtnvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.