CVE-2015-8391: pcre: inefficient posix character class syntax check (8.38/16)

Severity: Critical

CVSS Score: 9.8

The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.