CVE-2015-3217

CVE-2015-3217 describes a denial-of-service vulnerability affecting PCRE versions 7.8, 8.32-8.37, and PCRE2 10.10, including IBM PowerKVM. The flaw stems from improper handling of group empty matches in regular expressions, which can lead to a stack-based buffer overflow. This vulnerability carries a CVSS v3 score of 7.5 (HIGH), indicating a high-severity issue. It is remotely exploitable with low attack complexity and no user interaction required, potentially resulting in a denial of service. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness.