Medium severity5.5NVD Advisory· Published Jan 14, 2020· Updated Jun 17, 2026
CVE-2015-2326
CVE-2015-2326
Description
The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular expression with a group containing both a forward referencing subroutine call and a recursive back reference, as demonstrated by "((?+1)(\1))/".
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- PCRE/PCREdescription
- osv-coords7 versionspkg:rpm/opensuse/php5&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/php7&distro=openSUSE%20Tumbleweedpkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012
< 5.6.28-1.1+ 6 more
- (no CPE)range: < 5.6.28-1.1
- (no CPE)range: < 7.0.14-1.4
- (no CPE)range: < 10.0.20-18.1
- (no CPE)range: < 10.0.20-18.1
- (no CPE)range: < 10.0.20-18.1
- (no CPE)range: < 10.0.20-18.1
- (no CPE)range: < 10.0.20-18.1
Patches
Vulnerability mechanics
References
4- bugs.exim.org/show_bug.cginvdExploitIssue TrackingPermissions RequiredThird Party Advisory
- lists.opensuse.org/opensuse-updates/2015-05/msg00014.htmlnvdMailing ListThird Party Advisory
- fortiguard.com/zeroday/FG-VD-15-016nvdThird Party Advisory
- www.pcre.org/original/changelog.txtnvdRelease NotesThird Party Advisory
News mentions
0No linked articles in our index yet.