Fluid Attacks Database

Description

pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	pcre3	>=0 <2:8.38-1	2:8.38-1
debian 11	pcre3	>=0 <2:8.38-1	2:8.38-1
rpm rhel7	pcre	-	-

Aliases

1. CVE-2015-83932. NVD-2015-83933. OSV-DEBIAN-2015-83934. OSV-2015-83935. SECURITY-TRACKER-CVE-2015-8393

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.