CVE-2015-8383

CVE-2015-8383 describes a critical buffer overflow vulnerability in PCRE versions prior to 8.38, affecting products like Fedora and PHP that utilize the library. This flaw allows remote attackers to trigger a denial of service or potentially achieve further unspecified impact through specially crafted regular expressions, as demonstrated by JavaScript RegExp objects in Konqueror. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity, posing a high risk to confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code, or significant community discussion, indicating a low current threat level.