CVEs published in December 2015
662 vulnerabilities, 198 critical, 4 exploited.
- fedoraproject fedora, pcre perl compatible regular expression library, php +2 morePCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote...9.8 Critical
- oracle linux, pcre perl compatible regular expression library +1 morePCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an...7.5 High
- fedoraproject fedora, pcre perl compatible regular expression library, php +2 morePCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows...7.3 High
- fedoraproject fedora, oracle linux, pcre perl compatible regular expression library +1 more +3 morePCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive...9.8 Critical
- oracle linux, pcre perl compatible regular expression library +1 morePCRE before 8.38 mishandles the /(?|(\k'Pm')|(?'Pm'))/ pattern and related patterns with certain...7.5 High
- pcre perl compatible regular expression libraryPCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns with certain...7.5 High
- fedoraproject fedora, pcre perl compatible regular expression library, php +2 morePCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to...9.8 Critical
- pcre perl compatible regular expression libraryThe match function in pcre_exec.c in PCRE before 8.37 mishandles the /(?:((abcd))|(((?:(?:(?:(?...6.4 Medium
- pcre perl compatible regular expression libraryThe compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2...7.5 High
- fedoraproject fedora, pcre perl compatible regular expression library +1 moreThe pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \01...7.5 High
- pcre, oracle linux +1 morePCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain...7.5 High
- pcre perl compatible regular expression libraryPCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern and related patterns with certain...7.5 High