CVE-2015-8393
pcre: pcregrep -q is not always quiet (8.38/28)
Loading…
Severity
UnknownRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · November 23, 2015
Updated · August 5, 2026
Description
pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 4.3AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE not specified