CVE-2015-8394: pcre: Integer overflow caused by missing check for certain conditions (8.38/31)

Severity: Critical

CVSS Score: 9.8

PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.