CVE-2015-3210

Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by /^(?P=B)((?P=B)(?J:(?P<B>c)(?P<B>a(?P=B)))>WGXCREDITS)/, a different vulnerability than CVE-2015-8384.

• CWE-787

• http://rhn.redhat.com/errata/RHSA-2016-2750.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2015/06/01/7Mailing List
• http://www.openwall.com/lists/oss-security/2015/12/02/11Mailing List
• http://www.securityfocus.com/bid/74934Broken Link, Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2016:1132Third Party Advisory
• https://bugs.exim.org/show_bug.cgi?id=1636Exploit, Issue Tracking, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2750.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2015/06/01/7Mailing List
• http://www.openwall.com/lists/oss-security/2015/12/02/11Mailing List
• http://www.securityfocus.com/bid/74934Broken Link, Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2016:1132Third Party Advisory
• https://bugs.exim.org/show_bug.cgi?id=1636Exploit, Issue Tracking, Vendor Advisory

Published

Dec 13, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3204libreswan 3.9 through 3.12 allows remote attackers to cause …
• CVE-2015-3205libmimedir allows remote attackers to execute arbitrary code…
• CVE-2015-3206The checkPassword function in python-kerberos does not authe…
• CVE-2015-3207In Openshift Origin 3 the cookies being set in console have …5.3
• CVE-2015-3208Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-3209Heap-based buffer overflow in the PCNET controller in QEMU a…
• CVE-2015-3211php-fpm allows local users to write to or create arbitrary f…
• CVE-2015-3212Race condition in net/sctp/socket.c in the Linux kernel befo…
• CVE-2015-3213The gesture handling code in Clutter before 1.16.2 allows ph…
• CVE-2015-3214The pit_ioport_read in i8254.c in the Linux kernel before 2.…
• CVE-2015-3215The NetKVM Windows Virtio driver allows remote attackers to …
• CVE-2015-3216Race condition in a certain Red Hat patch to the PRNG lock i…