csaf_suse - suse-su-2016:2971-1

Vulnerability from csaf_suse

Published

2016-12-02 10:43

Modified

2016-12-02 10:43

Summary

Security update for pcre

Notes

Title of the patch

Security update for pcre

Description of the patch

This update for pcre to version 8.39 (bsc#972127) fixes several issues. If you use pcre extensively please be aware that this is an update to a new version. Please make sure that your software works with the updated version. This version fixes a number of vulnerabilities that affect pcre and applications using the libary when accepting untrusted input as regular expressions or as part thereof. Remote attackers could have caused the application to crash, disclose information or potentially execute arbitrary code. These security issues were fixed: - CVE-2014-8964: Heap-based buffer overflow in PCRE allowed remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats (bsc#906574). - CVE-2015-2325: Heap buffer overflow in compile_branch() (bsc#924960). - CVE-2015-3210: Heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288) - CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878). - CVE-2015-5073: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227). - bsc#942865: heap overflow in compile_regex() - CVE-2015-8380: The pcre_exec function in pcre_exec.c mishandled a // pattern with a \01 string, which allowed remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror (bsc#957566). - CVE-2015-2327: PCRE mishandled certain patterns with internal recursive back references, which allowed remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror (bsc#957567). - bsc#957598: Various security issues - CVE-2015-8381: Heap Overflow in compile_regex() (bsc#957598). - CVE-2015-8382: Regular Expression Uninitialized Pointer Information Disclosure Vulnerability (ZDI-CAN-2547)(bsc#957598). - CVE-2015-8383: Buffer overflow caused by repeated conditional group(bsc#957598). - CVE-2015-8384: Buffer overflow caused by recursive back reference by name within certain group(bsc#957598). - CVE-2015-8385: Buffer overflow caused by forward reference by name to certain group(bsc#957598). - CVE-2015-8386: Buffer overflow caused by lookbehind assertion(bsc#957598). - CVE-2015-8387: Integer overflow in subroutine calls(bsc#957598). - CVE-2015-8388: Buffer overflow caused by certain patterns with an unmatched closing parenthesis(bsc#957598). - CVE-2015-8389: Infinite recursion in JIT compiler when processing certain patterns(bsc#957598). - CVE-2015-8390: Reading from uninitialized memory when processing certain patterns(bsc#957598). - CVE-2015-8391: Some pathological patterns causes pcre_compile() to run for a very long time(bsc#957598). - CVE-2015-8392: Buffer overflow caused by certain patterns with duplicated named groups(bsc#957598). - CVE-2015-8393: Information leak when running pcgrep -q on crafted binary(bsc#957598). - CVE-2015-8394: Integer overflow caused by missing check for certain conditions(bsc#957598). - CVE-2015-8395: Buffer overflow caused by certain references(bsc#957598). - CVE-2015-2328: PCRE mishandled the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allowed remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression (bsc#957600). - CVE-2016-1283: The pcre_compile2 function in pcre_compile.c in PCRE mishandled certain patterns with named subgroups, which allowed remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression (bsc#960837). - CVE-2016-3191: The compile_branch function in pcre_compile.c in pcre2_compile.c mishandled patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allowed remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression (bsc#971741). These non-security issues were fixed: - JIT compiler improvements - performance improvements - The Unicode data tables have been updated to Unicode 7.0.0.

Patchnames

SUSE-SLE-DESKTOP-12-SP1-2016-1744,SUSE-SLE-DESKTOP-12-SP2-2016-1744,SUSE-SLE-HA-12-SP1-2016-1744,SUSE-SLE-HA-12-SP2-2016-1744,SUSE-SLE-RPI-12-SP2-2016-1744,SUSE-SLE-SDK-12-SP1-2016-1744,SUSE-SLE-SDK-12-SP2-2016-1744,SUSE-SLE-SERVER-12-SP1-2016-1744,SUSE-SLE-SERVER-12-SP2-2016-1744,SUSE-SLE-WE-12-SP1-2016-1744,SUSE-SLE-WE-12-SP2-2016-1744

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for pcre",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "\nThis update for pcre to version 8.39 (bsc#972127) fixes several issues.\n\nIf you use pcre extensively please be aware that this is an update to a new version. Please\nmake sure that your software works with the updated version.\n\nThis version fixes a number of vulnerabilities that affect pcre\nand applications using the libary when accepting untrusted input\nas regular expressions or as part thereof. Remote attackers could\nhave caused the application to crash, disclose information or\npotentially execute arbitrary code. These security issues were fixed:\n\n- CVE-2014-8964: Heap-based buffer overflow in PCRE allowed remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats (bsc#906574).\n- CVE-2015-2325: Heap buffer overflow in compile_branch() (bsc#924960).\n- CVE-2015-3210: Heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288)\n- CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878).\n- CVE-2015-5073: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227).\n- bsc#942865: heap overflow in compile_regex()\n- CVE-2015-8380: The pcre_exec function in pcre_exec.c mishandled a // pattern with a \\01 string, which allowed remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror (bsc#957566).\n- CVE-2015-2327: PCRE mishandled certain patterns with internal recursive back references, which allowed remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror (bsc#957567).\n- bsc#957598: Various security issues \n- CVE-2015-8381: Heap Overflow in compile_regex() (bsc#957598).\n- CVE-2015-8382: Regular Expression Uninitialized Pointer Information Disclosure Vulnerability (ZDI-CAN-2547)(bsc#957598).\n- CVE-2015-8383: Buffer overflow caused by repeated conditional group(bsc#957598).\n- CVE-2015-8384: Buffer overflow caused by recursive back reference by name within certain group(bsc#957598).\n- CVE-2015-8385: Buffer overflow caused by forward reference by name to certain group(bsc#957598).\n- CVE-2015-8386: Buffer overflow caused by lookbehind assertion(bsc#957598).\n- CVE-2015-8387: Integer overflow in subroutine calls(bsc#957598).\n- CVE-2015-8388: Buffer overflow caused by certain patterns with an unmatched closing parenthesis(bsc#957598).\n- CVE-2015-8389: Infinite recursion in JIT compiler when processing certain patterns(bsc#957598).\n- CVE-2015-8390: Reading from uninitialized memory when processing certain patterns(bsc#957598).\n- CVE-2015-8391: Some pathological patterns causes pcre_compile() to run for a very long time(bsc#957598).\n- CVE-2015-8392: Buffer overflow caused by certain patterns with duplicated named groups(bsc#957598).\n- CVE-2015-8393: Information leak when running pcgrep -q on crafted binary(bsc#957598).\n- CVE-2015-8394: Integer overflow caused by missing check for certain conditions(bsc#957598).\n- CVE-2015-8395: Buffer overflow caused by certain references(bsc#957598).\n- CVE-2015-2328: PCRE mishandled the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allowed remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression (bsc#957600).\n- CVE-2016-1283: The pcre_compile2 function in pcre_compile.c in PCRE mishandled certain patterns with named subgroups, which allowed remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression (bsc#960837).\n- CVE-2016-3191: The compile_branch function in pcre_compile.c in pcre2_compile.c mishandled patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allowed remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression (bsc#971741).\n\nThese non-security issues were fixed:\n- JIT compiler improvements\n- performance improvements\n- The Unicode data tables have been updated to Unicode 7.0.0.\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-SLE-DESKTOP-12-SP1-2016-1744,SUSE-SLE-DESKTOP-12-SP2-2016-1744,SUSE-SLE-HA-12-SP1-2016-1744,SUSE-SLE-HA-12-SP2-2016-1744,SUSE-SLE-RPI-12-SP2-2016-1744,SUSE-SLE-SDK-12-SP1-2016-1744,SUSE-SLE-SDK-12-SP2-2016-1744,SUSE-SLE-SERVER-12-SP1-2016-1744,SUSE-SLE-SERVER-12-SP2-2016-1744,SUSE-SLE-WE-12-SP1-2016-1744,SUSE-SLE-WE-12-SP2-2016-1744",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2971-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2016:2971-1",
            url: "https://www.suse.com/support/update/announcement/2016/suse-su-20162971-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2016:2971-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2016-December/002436.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 906574",
            url: "https://bugzilla.suse.com/906574",
         },
         {
            category: "self",
            summary: "SUSE Bug 924960",
            url: "https://bugzilla.suse.com/924960",
         },
         {
            category: "self",
            summary: "SUSE Bug 933288",
            url: "https://bugzilla.suse.com/933288",
         },
         {
            category: "self",
            summary: "SUSE Bug 933878",
            url: "https://bugzilla.suse.com/933878",
         },
         {
            category: "self",
            summary: "SUSE Bug 936227",
            url: "https://bugzilla.suse.com/936227",
         },
         {
            category: "self",
            summary: "SUSE Bug 942865",
            url: "https://bugzilla.suse.com/942865",
         },
         {
            category: "self",
            summary: "SUSE Bug 957566",
            url: "https://bugzilla.suse.com/957566",
         },
         {
            category: "self",
            summary: "SUSE Bug 957567",
            url: "https://bugzilla.suse.com/957567",
         },
         {
            category: "self",
            summary: "SUSE Bug 957598",
            url: "https://bugzilla.suse.com/957598",
         },
         {
            category: "self",
            summary: "SUSE Bug 957600",
            url: "https://bugzilla.suse.com/957600",
         },
         {
            category: "self",
            summary: "SUSE Bug 960837",
            url: "https://bugzilla.suse.com/960837",
         },
         {
            category: "self",
            summary: "SUSE Bug 971741",
            url: "https://bugzilla.suse.com/971741",
         },
         {
            category: "self",
            summary: "SUSE Bug 972127",
            url: "https://bugzilla.suse.com/972127",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2014-8964 page",
            url: "https://www.suse.com/security/cve/CVE-2014-8964/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-2325 page",
            url: "https://www.suse.com/security/cve/CVE-2015-2325/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-2327 page",
            url: "https://www.suse.com/security/cve/CVE-2015-2327/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-2328 page",
            url: "https://www.suse.com/security/cve/CVE-2015-2328/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-3210 page",
            url: "https://www.suse.com/security/cve/CVE-2015-3210/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-3217 page",
            url: "https://www.suse.com/security/cve/CVE-2015-3217/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-5073 page",
            url: "https://www.suse.com/security/cve/CVE-2015-5073/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8380 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8380/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8381 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8381/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8382 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8382/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8383 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8383/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8384 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8384/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8385 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8385/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8386 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8386/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8387 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8387/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8388 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8388/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8389 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8389/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8390 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8390/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8391 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8391/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8392 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8392/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8393 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8393/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8394 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8394/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8395 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8395/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-1283 page",
            url: "https://www.suse.com/security/cve/CVE-2016-1283/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-3191 page",
            url: "https://www.suse.com/security/cve/CVE-2016-3191/",
         },
      ],
      title: "Security update for pcre",
      tracking: {
         current_release_date: "2016-12-02T10:43:31Z",
         generator: {
            date: "2016-12-02T10:43:31Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2016:2971-1",
         initial_release_date: "2016-12-02T10:43:31Z",
         revision_history: [
            {
               date: "2016-12-02T10:43:31Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libpcre1-8.39-5.1.aarch64",
                        product: {
                           name: "libpcre1-8.39-5.1.aarch64",
                           product_id: "libpcre1-8.39-5.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libpcre16-0-8.39-5.1.aarch64",
                        product: {
                           name: "libpcre16-0-8.39-5.1.aarch64",
                           product_id: "libpcre16-0-8.39-5.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libpcrecpp0-8.39-5.1.aarch64",
                        product: {
                           name: "libpcrecpp0-8.39-5.1.aarch64",
                           product_id: "libpcrecpp0-8.39-5.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libpcreposix0-8.39-5.1.aarch64",
                        product: {
                           name: "libpcreposix0-8.39-5.1.aarch64",
                           product_id: "libpcreposix0-8.39-5.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "pcre-devel-8.39-5.1.aarch64",
                        product: {
                           name: "pcre-devel-8.39-5.1.aarch64",
                           product_id: "pcre-devel-8.39-5.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "pcre-devel-static-8.39-5.1.aarch64",
                        product: {
                           name: "pcre-devel-static-8.39-5.1.aarch64",
                           product_id: "pcre-devel-static-8.39-5.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "pcre-tools-8.39-5.1.aarch64",
                        product: {
                           name: "pcre-tools-8.39-5.1.aarch64",
                           product_id: "pcre-tools-8.39-5.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libpcreposix0-8.39-5.1.ppc64le",
                        product: {
                           name: "libpcreposix0-8.39-5.1.ppc64le",
                           product_id: "libpcreposix0-8.39-5.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libpcrecpp0-8.39-5.1.ppc64le",
                        product: {
                           name: "libpcrecpp0-8.39-5.1.ppc64le",
                           product_id: "libpcrecpp0-8.39-5.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "pcre-devel-8.39-5.1.ppc64le",
                        product: {
                           name: "pcre-devel-8.39-5.1.ppc64le",
                           product_id: "pcre-devel-8.39-5.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "pcre-devel-static-8.39-5.1.ppc64le",
                        product: {
                           name: "pcre-devel-static-8.39-5.1.ppc64le",
                           product_id: "pcre-devel-static-8.39-5.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "pcre-tools-8.39-5.1.ppc64le",
                        product: {
                           name: "pcre-tools-8.39-5.1.ppc64le",
                           product_id: "pcre-tools-8.39-5.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libpcre1-8.39-5.1.ppc64le",
                        product: {
                           name: "libpcre1-8.39-5.1.ppc64le",
                           product_id: "libpcre1-8.39-5.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libpcre16-0-8.39-5.1.ppc64le",
                        product: {
                           name: "libpcre16-0-8.39-5.1.ppc64le",
                           product_id: "libpcre16-0-8.39-5.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libpcreposix0-8.39-5.1.s390x",
                        product: {
                           name: "libpcreposix0-8.39-5.1.s390x",
                           product_id: "libpcreposix0-8.39-5.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libpcrecpp0-8.39-5.1.s390x",
                        product: {
                           name: "libpcrecpp0-8.39-5.1.s390x",
                           product_id: "libpcrecpp0-8.39-5.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "pcre-devel-8.39-5.1.s390x",
                        product: {
                           name: "pcre-devel-8.39-5.1.s390x",
                           product_id: "pcre-devel-8.39-5.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "pcre-devel-static-8.39-5.1.s390x",
                        product: {
                           name: "pcre-devel-static-8.39-5.1.s390x",
                           product_id: "pcre-devel-static-8.39-5.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "pcre-tools-8.39-5.1.s390x",
                        product: {
                           name: "pcre-tools-8.39-5.1.s390x",
                           product_id: "pcre-tools-8.39-5.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libpcre1-8.39-5.1.s390x",
                        product: {
                           name: "libpcre1-8.39-5.1.s390x",
                           product_id: "libpcre1-8.39-5.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libpcre1-32bit-8.39-5.1.s390x",
                        product: {
                           name: "libpcre1-32bit-8.39-5.1.s390x",
                           product_id: "libpcre1-32bit-8.39-5.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libpcre16-0-8.39-5.1.s390x",
                        product: {
                           name: "libpcre16-0-8.39-5.1.s390x",
                           product_id: "libpcre16-0-8.39-5.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libpcre1-8.39-5.1.x86_64",
                        product: {
                           name: "libpcre1-8.39-5.1.x86_64",
                           product_id: "libpcre1-8.39-5.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libpcre1-32bit-8.39-5.1.x86_64",
                        product: {
                           name: "libpcre1-32bit-8.39-5.1.x86_64",
                           product_id: "libpcre1-32bit-8.39-5.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libpcre16-0-8.39-5.1.x86_64",
                        product: {
                           name: "libpcre16-0-8.39-5.1.x86_64",
                           product_id: "libpcre16-0-8.39-5.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libpcrecpp0-8.39-5.1.x86_64",
                        product: {
                           name: "libpcrecpp0-8.39-5.1.x86_64",
                           product_id: "libpcrecpp0-8.39-5.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libpcrecpp0-32bit-8.39-5.1.x86_64",
                        product: {
                           name: "libpcrecpp0-32bit-8.39-5.1.x86_64",
                           product_id: "libpcrecpp0-32bit-8.39-5.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libpcreposix0-8.39-5.1.x86_64",
                        product: {
                           name: "libpcreposix0-8.39-5.1.x86_64",
                           product_id: "libpcreposix0-8.39-5.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "pcre-devel-8.39-5.1.x86_64",
                        product: {
                           name: "pcre-devel-8.39-5.1.x86_64",
                           product_id: "pcre-devel-8.39-5.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "pcre-devel-static-8.39-5.1.x86_64",
                        product: {
                           name: "pcre-devel-static-8.39-5.1.x86_64",
                           product_id: "pcre-devel-static-8.39-5.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "pcre-tools-8.39-5.1.x86_64",
                        product: {
                           name: "pcre-tools-8.39-5.1.x86_64",
                           product_id: "pcre-tools-8.39-5.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Desktop 12 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Desktop 12 SP1",
                           product_id: "SUSE Linux Enterprise Desktop 12 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sled:12:sp1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Desktop 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Desktop 12 SP2",
                           product_id: "SUSE Linux Enterprise Desktop 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sled:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Availability Extension 12 SP1",
                        product: {
                           name: "SUSE Linux Enterprise High Availability Extension 12 SP1",
                           product_id: "SUSE Linux Enterprise High Availability Extension 12 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-ha:12:sp1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Availability Extension 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise High Availability Extension 12 SP2",
                           product_id: "SUSE Linux Enterprise High Availability Extension 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-ha:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                           product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Software Development Kit 12 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Software Development Kit 12 SP1",
                           product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-sdk:12:sp1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Software Development Kit 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Software Development Kit 12 SP2",
                           product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-sdk:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP1",
                           product_id: "SUSE Linux Enterprise Server 12 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP2",
                           product_id: "SUSE Linux Enterprise Server 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Workstation Extension 12 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Workstation Extension 12 SP1",
                           product_id: "SUSE Linux Enterprise Workstation Extension 12 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-we:12:sp1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Workstation Extension 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Workstation Extension 12 SP2",
                           product_id: "SUSE Linux Enterprise Workstation Extension 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-we:12:sp2",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
               product_id: "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
            },
            product_reference: "libpcre1-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-32bit-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
               product_id: "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
            },
            product_reference: "libpcre1-32bit-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
               product_id: "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
            },
            product_reference: "libpcre16-0-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcrecpp0-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
               product_id: "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
            },
            product_reference: "libpcrecpp0-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcrecpp0-32bit-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
               product_id: "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
            },
            product_reference: "libpcrecpp0-32bit-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
               product_id: "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
            },
            product_reference: "libpcre1-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-32bit-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
               product_id: "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
            },
            product_reference: "libpcre1-32bit-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
               product_id: "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
            },
            product_reference: "libpcre16-0-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcrecpp0-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
               product_id: "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            },
            product_reference: "libpcrecpp0-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcrecpp0-32bit-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
               product_id: "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
            },
            product_reference: "libpcrecpp0-32bit-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcreposix0-8.39-5.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 12 SP1",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
            },
            product_reference: "libpcreposix0-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcreposix0-8.39-5.1.s390x as component of SUSE Linux Enterprise High Availability Extension 12 SP1",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
            },
            product_reference: "libpcreposix0-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcreposix0-8.39-5.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 12 SP1",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
            },
            product_reference: "libpcreposix0-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcreposix0-8.39-5.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 12 SP2",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
            },
            product_reference: "libpcreposix0-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcreposix0-8.39-5.1.s390x as component of SUSE Linux Enterprise High Availability Extension 12 SP2",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
            },
            product_reference: "libpcreposix0-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcreposix0-8.39-5.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 12 SP2",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
            },
            product_reference: "libpcreposix0-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
               product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
            },
            product_reference: "libpcre1-8.39-5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
               product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
            },
            product_reference: "libpcre16-0-8.39-5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcrecpp0-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
            },
            product_reference: "libpcrecpp0-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcrecpp0-8.39-5.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
            },
            product_reference: "libpcrecpp0-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcrecpp0-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
            },
            product_reference: "libpcrecpp0-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcreposix0-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
            },
            product_reference: "libpcreposix0-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcreposix0-8.39-5.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
            },
            product_reference: "libpcreposix0-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcreposix0-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
            },
            product_reference: "libpcreposix0-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-devel-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
            },
            product_reference: "pcre-devel-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-devel-8.39-5.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
            },
            product_reference: "pcre-devel-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-devel-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
            },
            product_reference: "pcre-devel-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-devel-static-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
            },
            product_reference: "pcre-devel-static-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-devel-static-8.39-5.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
            },
            product_reference: "pcre-devel-static-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-devel-static-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
            },
            product_reference: "pcre-devel-static-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-tools-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
            },
            product_reference: "pcre-tools-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-tools-8.39-5.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
            },
            product_reference: "pcre-tools-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-tools-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
            },
            product_reference: "pcre-tools-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcrecpp0-8.39-5.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
            },
            product_reference: "libpcrecpp0-8.39-5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcrecpp0-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
            },
            product_reference: "libpcrecpp0-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcrecpp0-8.39-5.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
            },
            product_reference: "libpcrecpp0-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcrecpp0-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            },
            product_reference: "libpcrecpp0-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcreposix0-8.39-5.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
            },
            product_reference: "libpcreposix0-8.39-5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcreposix0-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
            },
            product_reference: "libpcreposix0-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcreposix0-8.39-5.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
            },
            product_reference: "libpcreposix0-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcreposix0-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
            },
            product_reference: "libpcreposix0-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-devel-8.39-5.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
            },
            product_reference: "pcre-devel-8.39-5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-devel-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
            },
            product_reference: "pcre-devel-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-devel-8.39-5.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
            },
            product_reference: "pcre-devel-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-devel-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
            },
            product_reference: "pcre-devel-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-devel-static-8.39-5.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
            },
            product_reference: "pcre-devel-static-8.39-5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-devel-static-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
            },
            product_reference: "pcre-devel-static-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-devel-static-8.39-5.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
            },
            product_reference: "pcre-devel-static-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-devel-static-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
            },
            product_reference: "pcre-devel-static-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-tools-8.39-5.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
            },
            product_reference: "pcre-tools-8.39-5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-tools-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
            },
            product_reference: "pcre-tools-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-tools-8.39-5.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
            },
            product_reference: "pcre-tools-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pcre-tools-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
            },
            product_reference: "pcre-tools-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
            },
            product_reference: "libpcre1-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
            },
            product_reference: "libpcre1-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
            },
            product_reference: "libpcre1-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-32bit-8.39-5.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
            },
            product_reference: "libpcre1-32bit-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-32bit-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
            },
            product_reference: "libpcre1-32bit-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
            },
            product_reference: "libpcre16-0-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
            },
            product_reference: "libpcre16-0-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
            },
            product_reference: "libpcre16-0-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
            },
            product_reference: "libpcre1-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
            },
            product_reference: "libpcre1-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
            },
            product_reference: "libpcre1-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-32bit-8.39-5.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
            },
            product_reference: "libpcre1-32bit-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-32bit-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
            },
            product_reference: "libpcre1-32bit-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
            },
            product_reference: "libpcre16-0-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
            },
            product_reference: "libpcre16-0-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
            },
            product_reference: "libpcre16-0-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
            },
            product_reference: "libpcre1-8.39-5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
            },
            product_reference: "libpcre1-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
            },
            product_reference: "libpcre1-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
            },
            product_reference: "libpcre1-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-32bit-8.39-5.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
            },
            product_reference: "libpcre1-32bit-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-32bit-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
            },
            product_reference: "libpcre1-32bit-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
            },
            product_reference: "libpcre16-0-8.39-5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
            },
            product_reference: "libpcre16-0-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
            },
            product_reference: "libpcre16-0-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
            },
            product_reference: "libpcre16-0-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
            },
            product_reference: "libpcre1-8.39-5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
            },
            product_reference: "libpcre1-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
            },
            product_reference: "libpcre1-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
            },
            product_reference: "libpcre1-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-32bit-8.39-5.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
            },
            product_reference: "libpcre1-32bit-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre1-32bit-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
            },
            product_reference: "libpcre1-32bit-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
            },
            product_reference: "libpcre16-0-8.39-5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
            },
            product_reference: "libpcre16-0-8.39-5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
            },
            product_reference: "libpcre16-0-8.39-5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcre16-0-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
            },
            product_reference: "libpcre16-0-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcrecpp0-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP1",
               product_id: "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
            },
            product_reference: "libpcrecpp0-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcrecpp0-32bit-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP1",
               product_id: "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
            },
            product_reference: "libpcrecpp0-32bit-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcrecpp0-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP2",
               product_id: "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            },
            product_reference: "libpcrecpp0-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libpcrecpp0-32bit-8.39-5.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP2",
               product_id: "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
            },
            product_reference: "libpcrecpp0-32bit-8.39-5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 12 SP2",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2014-8964",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2014-8964",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2014-8964",
               url: "https://www.suse.com/security/cve/CVE-2014-8964",
            },
            {
               category: "external",
               summary: "SUSE Bug 906574 for CVE-2014-8964",
               url: "https://bugzilla.suse.com/906574",
            },
            {
               category: "external",
               summary: "SUSE Bug 924960 for CVE-2014-8964",
               url: "https://bugzilla.suse.com/924960",
            },
            {
               category: "external",
               summary: "SUSE Bug 933288 for CVE-2014-8964",
               url: "https://bugzilla.suse.com/933288",
            },
            {
               category: "external",
               summary: "SUSE Bug 936408 for CVE-2014-8964",
               url: "https://bugzilla.suse.com/936408",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2014-8964",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "moderate",
            },
         ],
         title: "CVE-2014-8964",
      },
      {
         cve: "CVE-2015-2325",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-2325",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large number of times within a repeated outer group that has a zero minimum quantifier.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-2325",
               url: "https://www.suse.com/security/cve/CVE-2015-2325",
            },
            {
               category: "external",
               summary: "SUSE Bug 924960 for CVE-2015-2325",
               url: "https://bugzilla.suse.com/924960",
            },
            {
               category: "external",
               summary: "SUSE Bug 933288 for CVE-2015-2325",
               url: "https://bugzilla.suse.com/933288",
            },
            {
               category: "external",
               summary: "SUSE Bug 936408 for CVE-2015-2325",
               url: "https://bugzilla.suse.com/936408",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-2325",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-2325",
      },
      {
         cve: "CVE-2015-2327",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-2327",
            },
         ],
         notes: [
            {
               category: "general",
               text: "PCRE before 8.36 mishandles the /(((a\\2)|(a*)\\g<-1>))*/ pattern and related patterns with certain internal recursive back references, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-2327",
               url: "https://www.suse.com/security/cve/CVE-2015-2327",
            },
            {
               category: "external",
               summary: "SUSE Bug 906574 for CVE-2015-2327",
               url: "https://bugzilla.suse.com/906574",
            },
            {
               category: "external",
               summary: "SUSE Bug 957567 for CVE-2015-2327",
               url: "https://bugzilla.suse.com/957567",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-2327",
      },
      {
         cve: "CVE-2015-2328",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-2328",
            },
         ],
         notes: [
            {
               category: "general",
               text: "PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-2328",
               url: "https://www.suse.com/security/cve/CVE-2015-2328",
            },
            {
               category: "external",
               summary: "SUSE Bug 906574 for CVE-2015-2328",
               url: "https://bugzilla.suse.com/906574",
            },
            {
               category: "external",
               summary: "SUSE Bug 957600 for CVE-2015-2328",
               url: "https://bugzilla.suse.com/957600",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-2328",
      },
      {
         cve: "CVE-2015-3210",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-3210",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by /^(?P=B)((?P=B)(?J:(?P<B>c)(?P<B>a(?P=B)))>WGXCREDITS)/, a different vulnerability than CVE-2015-8384.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-3210",
               url: "https://www.suse.com/security/cve/CVE-2015-3210",
            },
            {
               category: "external",
               summary: "SUSE Bug 933288 for CVE-2015-3210",
               url: "https://bugzilla.suse.com/933288",
            },
            {
               category: "external",
               summary: "SUSE Bug 957598 for CVE-2015-3210",
               url: "https://bugzilla.suse.com/957598",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-3210",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "low",
            },
         ],
         title: "CVE-2015-3210",
      },
      {
         cve: "CVE-2015-3217",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-3217",
            },
         ],
         notes: [
            {
               category: "general",
               text: "PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\\\.|([^\\\\\\\\W_])?)+)+$/.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-3217",
               url: "https://www.suse.com/security/cve/CVE-2015-3217",
            },
            {
               category: "external",
               summary: "SUSE Bug 933878 for CVE-2015-3217",
               url: "https://bugzilla.suse.com/933878",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-3217",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-3217",
      },
      {
         cve: "CVE-2015-5073",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-5073",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-5073",
               url: "https://www.suse.com/security/cve/CVE-2015-5073",
            },
            {
               category: "external",
               summary: "SUSE Bug 936227 for CVE-2015-5073",
               url: "https://bugzilla.suse.com/936227",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-5073",
      },
      {
         cve: "CVE-2015-8380",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8380",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \\01 string, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8380",
               url: "https://www.suse.com/security/cve/CVE-2015-8380",
            },
            {
               category: "external",
               summary: "SUSE Bug 957566 for CVE-2015-8380",
               url: "https://bugzilla.suse.com/957566",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "important",
            },
         ],
         title: "CVE-2015-8380",
      },
      {
         cve: "CVE-2015-8381",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8381",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles the /(?J:(?|(:(?|(?'R')(\\k'R')|((?'R')))H'Rk'Rf)|s(?'R'))))/ and /(?J:(?|(:(?|(?'R')(\\z(?|(?'R')(\\k'R')|((?'R')))k'R')|((?'R')))H'Ak'Rf)|s(?'R')))/ patterns, and related patterns with certain group references, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8381",
               url: "https://www.suse.com/security/cve/CVE-2015-8381",
            },
            {
               category: "external",
               summary: "SUSE Bug 906574 for CVE-2015-8381",
               url: "https://bugzilla.suse.com/906574",
            },
            {
               category: "external",
               summary: "SUSE Bug 957598 for CVE-2015-8381",
               url: "https://bugzilla.suse.com/957598",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-8381",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-8381",
      },
      {
         cve: "CVE-2015-8382",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8382",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The match function in pcre_exec.c in PCRE before 8.37 mishandles the /(?:((abcd))|(((?:(?:(?:(?:abc|(?:abcdef))))b)abcdefghi)abc)|((*ACCEPT)))/ pattern and related patterns involving (*ACCEPT), which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (partially initialized memory and application crash) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-2547.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8382",
               url: "https://www.suse.com/security/cve/CVE-2015-8382",
            },
            {
               category: "external",
               summary: "SUSE Bug 957598 for CVE-2015-8382",
               url: "https://bugzilla.suse.com/957598",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-8382",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "critical",
            },
         ],
         title: "CVE-2015-8382",
      },
      {
         cve: "CVE-2015-8383",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8383",
            },
         ],
         notes: [
            {
               category: "general",
               text: "PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8383",
               url: "https://www.suse.com/security/cve/CVE-2015-8383",
            },
            {
               category: "external",
               summary: "SUSE Bug 957598 for CVE-2015-8383",
               url: "https://bugzilla.suse.com/957598",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-8383",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "critical",
            },
         ],
         title: "CVE-2015-8383",
      },
      {
         cve: "CVE-2015-8384",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8384",
            },
         ],
         notes: [
            {
               category: "general",
               text: "PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\\g{d}))/ pattern and related patterns with certain recursive back references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8392 and CVE-2015-8395.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8384",
               url: "https://www.suse.com/security/cve/CVE-2015-8384",
            },
            {
               category: "external",
               summary: "SUSE Bug 906574 for CVE-2015-8384",
               url: "https://bugzilla.suse.com/906574",
            },
            {
               category: "external",
               summary: "SUSE Bug 957598 for CVE-2015-8384",
               url: "https://bugzilla.suse.com/957598",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-8384",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "critical",
            },
         ],
         title: "CVE-2015-8384",
      },
      {
         cve: "CVE-2015-8385",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8385",
            },
         ],
         notes: [
            {
               category: "general",
               text: "PCRE before 8.38 mishandles the /(?|(\\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8385",
               url: "https://www.suse.com/security/cve/CVE-2015-8385",
            },
            {
               category: "external",
               summary: "SUSE Bug 957598 for CVE-2015-8385",
               url: "https://bugzilla.suse.com/957598",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-8385",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "critical",
            },
         ],
         title: "CVE-2015-8385",
      },
      {
         cve: "CVE-2015-8386",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8386",
            },
         ],
         notes: [
            {
               category: "general",
               text: "PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8386",
               url: "https://www.suse.com/security/cve/CVE-2015-8386",
            },
            {
               category: "external",
               summary: "SUSE Bug 957598 for CVE-2015-8386",
               url: "https://bugzilla.suse.com/957598",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-8386",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "critical",
            },
         ],
         title: "CVE-2015-8386",
      },
      {
         cve: "CVE-2015-8387",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8387",
            },
         ],
         notes: [
            {
               category: "general",
               text: "PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8387",
               url: "https://www.suse.com/security/cve/CVE-2015-8387",
            },
            {
               category: "external",
               summary: "SUSE Bug 957598 for CVE-2015-8387",
               url: "https://bugzilla.suse.com/957598",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-8387",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "critical",
            },
         ],
         title: "CVE-2015-8387",
      },
      {
         cve: "CVE-2015-8388",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8388",
            },
         ],
         notes: [
            {
               category: "general",
               text: "PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8388",
               url: "https://www.suse.com/security/cve/CVE-2015-8388",
            },
            {
               category: "external",
               summary: "SUSE Bug 936227 for CVE-2015-8388",
               url: "https://bugzilla.suse.com/936227",
            },
            {
               category: "external",
               summary: "SUSE Bug 957598 for CVE-2015-8388",
               url: "https://bugzilla.suse.com/957598",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-8388",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "critical",
            },
         ],
         title: "CVE-2015-8388",
      },
      {
         cve: "CVE-2015-8389",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8389",
            },
         ],
         notes: [
            {
               category: "general",
               text: "PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a denial of service (infinite recursion) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8389",
               url: "https://www.suse.com/security/cve/CVE-2015-8389",
            },
            {
               category: "external",
               summary: "SUSE Bug 957598 for CVE-2015-8389",
               url: "https://bugzilla.suse.com/957598",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-8389",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "critical",
            },
         ],
         title: "CVE-2015-8389",
      },
      {
         cve: "CVE-2015-8390",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8390",
            },
         ],
         notes: [
            {
               category: "general",
               text: "PCRE before 8.38 mishandles the [: and \\\\ substrings in character classes, which allows remote attackers to cause a denial of service (uninitialized memory read) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8390",
               url: "https://www.suse.com/security/cve/CVE-2015-8390",
            },
            {
               category: "external",
               summary: "SUSE Bug 957598 for CVE-2015-8390",
               url: "https://bugzilla.suse.com/957598",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-8390",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "critical",
            },
         ],
         title: "CVE-2015-8390",
      },
      {
         cve: "CVE-2015-8391",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8391",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8391",
               url: "https://www.suse.com/security/cve/CVE-2015-8391",
            },
            {
               category: "external",
               summary: "SUSE Bug 957598 for CVE-2015-8391",
               url: "https://bugzilla.suse.com/957598",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-8391",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "critical",
            },
         ],
         title: "CVE-2015-8391",
      },
      {
         cve: "CVE-2015-8392",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8392",
            },
         ],
         notes: [
            {
               category: "general",
               text: "PCRE before 8.38 mishandles certain instances of the (?| substring, which allows remote attackers to cause a denial of service (unintended recursion and buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and CVE-2015-8395.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8392",
               url: "https://www.suse.com/security/cve/CVE-2015-8392",
            },
            {
               category: "external",
               summary: "SUSE Bug 906574 for CVE-2015-8392",
               url: "https://bugzilla.suse.com/906574",
            },
            {
               category: "external",
               summary: "SUSE Bug 957598 for CVE-2015-8392",
               url: "https://bugzilla.suse.com/957598",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-8392",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-8392",
      },
      {
         cve: "CVE-2015-8393",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8393",
            },
         ],
         notes: [
            {
               category: "general",
               text: "pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8393",
               url: "https://www.suse.com/security/cve/CVE-2015-8393",
            },
            {
               category: "external",
               summary: "SUSE Bug 957598 for CVE-2015-8393",
               url: "https://bugzilla.suse.com/957598",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-8393",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "critical",
            },
         ],
         title: "CVE-2015-8393",
      },
      {
         cve: "CVE-2015-8394",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8394",
            },
         ],
         notes: [
            {
               category: "general",
               text: "PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8394",
               url: "https://www.suse.com/security/cve/CVE-2015-8394",
            },
            {
               category: "external",
               summary: "SUSE Bug 957598 for CVE-2015-8394",
               url: "https://bugzilla.suse.com/957598",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-8394",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "critical",
            },
         ],
         title: "CVE-2015-8394",
      },
      {
         cve: "CVE-2015-8395",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8395",
            },
         ],
         notes: [
            {
               category: "general",
               text: "PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and CVE-2015-8392.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8395",
               url: "https://www.suse.com/security/cve/CVE-2015-8395",
            },
            {
               category: "external",
               summary: "SUSE Bug 906574 for CVE-2015-8395",
               url: "https://bugzilla.suse.com/906574",
            },
            {
               category: "external",
               summary: "SUSE Bug 957598 for CVE-2015-8395",
               url: "https://bugzilla.suse.com/957598",
            },
            {
               category: "external",
               summary: "SUSE Bug 958373 for CVE-2015-8395",
               url: "https://bugzilla.suse.com/958373",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "critical",
            },
         ],
         title: "CVE-2015-8395",
      },
      {
         cve: "CVE-2016-1283",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-1283",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\\\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\\){97)?J)?J)(?'R'(?'R'\\){99|(:(?|(?'R')(\\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-1283",
               url: "https://www.suse.com/security/cve/CVE-2016-1283",
            },
            {
               category: "external",
               summary: "SUSE Bug 960837 for CVE-2016-1283",
               url: "https://bugzilla.suse.com/960837",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "critical",
            },
         ],
         title: "CVE-2016-1283",
      },
      {
         cve: "CVE-2016-3191",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-3191",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-3191",
               url: "https://www.suse.com/security/cve/CVE-2016-3191",
            },
            {
               category: "external",
               summary: "SUSE Bug 971741 for CVE-2016-3191",
               url: "https://bugzilla.suse.com/971741",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.7,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre1-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcre16-0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcreposix0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-devel-static-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:pcre-tools-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcrecpp0-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-32bit-8.39-5.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcrecpp0-8.39-5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-12-02T10:43:31Z",
               details: "low",
            },
         ],
         title: "CVE-2016-3191",
      },
   ],
}

cve-2015-8393

Vulnerability from cvelistv5

Published

2015-12-02 00:00

Modified

2024-08-06 08:13

Severity ?

Summary

pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list
	http://www.securityfocus.com/bid/82990	vdb-entry
	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html	vendor-advisory
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731
	https://bto.bluecoat.com/security-advisory/sa128
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup
	https://security.gentoo.org/glsa/201607-02	vendor-advisory
	https://security.netapp.com/advisory/ntap-20230216-0002/

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.659Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  name: "82990",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/82990",
               },
               {
                  name: "FEDORA-2015-eb896290d3",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20230216-0002/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-02-16T00:00:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               name: "82990",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securityfocus.com/bid/82990",
            },
            {
               name: "FEDORA-2015-eb896290d3",
               tags: [
                  "vendor-advisory",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html",
            },
            {
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
            },
            {
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20230216-0002/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8393",
      datePublished: "2015-12-02T00:00:00",
      dateReserved: "2015-12-01T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.659Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-5073

Vulnerability from cvelistv5

Published

2016-12-13 16:00

Modified

2024-08-06 06:32

Severity ?

Summary

Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/75430	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1025.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2015/06/26/1	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2015/06/26/3	mailing-list, x_refsource_MLIST
	https://bugs.exim.org/show_bug.cgi?id=1651	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1033154	vdb-entry, x_refsource_SECTRACK
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?revision=1609&view=markup	x_refsource_CONFIRM
	http://vcs.pcre.org/pcre?view=revision&revision=1571	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201607-02	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T06:32:32.687Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "75430",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/75430",
               },
               {
                  name: "RHSA-2016:1132",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:1132",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
               },
               {
                  name: "RHSA-2016:1025",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
               },
               {
                  name: "RHSA-2016:2750",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
               },
               {
                  name: "[oss-security] 20150626 CVE Request: PCRE Library Heap Overflow Vulnerability in find_fixedlength()",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/06/26/1",
               },
               {
                  name: "[oss-security] 20150626 Re: CVE Request: PCRE Library Heap Overflow Vulnerability in find_fixedlength()",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/06/26/3",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.exim.org/show_bug.cgi?id=1651",
               },
               {
                  name: "1033154",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033154",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?revision=1609&view=markup",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre?view=revision&revision=1571",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-06-26T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-17T16:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "75430",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/75430",
            },
            {
               name: "RHSA-2016:1132",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:1132",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
            },
            {
               name: "RHSA-2016:1025",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
            },
            {
               name: "RHSA-2016:2750",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
            },
            {
               name: "[oss-security] 20150626 CVE Request: PCRE Library Heap Overflow Vulnerability in find_fixedlength()",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/06/26/1",
            },
            {
               name: "[oss-security] 20150626 Re: CVE Request: PCRE Library Heap Overflow Vulnerability in find_fixedlength()",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/06/26/3",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.exim.org/show_bug.cgi?id=1651",
            },
            {
               name: "1033154",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033154",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?revision=1609&view=markup",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://vcs.pcre.org/pcre?view=revision&revision=1571",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-5073",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "75430",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/75430",
                  },
                  {
                     name: "RHSA-2016:1132",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2016:1132",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                  },
                  {
                     name: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
                     refsource: "CONFIRM",
                     url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
                  },
                  {
                     name: "RHSA-2016:1025",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
                  },
                  {
                     name: "RHSA-2016:2750",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
                  },
                  {
                     name: "[oss-security] 20150626 CVE Request: PCRE Library Heap Overflow Vulnerability in find_fixedlength()",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/06/26/1",
                  },
                  {
                     name: "[oss-security] 20150626 Re: CVE Request: PCRE Library Heap Overflow Vulnerability in find_fixedlength()",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/06/26/3",
                  },
                  {
                     name: "https://bugs.exim.org/show_bug.cgi?id=1651",
                     refsource: "CONFIRM",
                     url: "https://bugs.exim.org/show_bug.cgi?id=1651",
                  },
                  {
                     name: "1033154",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033154",
                  },
                  {
                     name: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?revision=1609&view=markup",
                     refsource: "CONFIRM",
                     url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?revision=1609&view=markup",
                  },
                  {
                     name: "http://vcs.pcre.org/pcre?view=revision&revision=1571",
                     refsource: "CONFIRM",
                     url: "http://vcs.pcre.org/pcre?view=revision&revision=1571",
                  },
                  {
                     name: "GLSA-201607-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-02",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-5073",
      datePublished: "2016-12-13T16:00:00",
      dateReserved: "2015-06-26T00:00:00",
      dateUpdated: "2024-08-06T06:32:32.687Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-3210

Vulnerability from cvelistv5

Published

2016-12-13 16:00

Modified

2024-08-06 05:39

Severity ?

Summary

Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by /^(?P=B)((?P=B)(?J:(?P<B>c)(?P<B>a(?P=B)))>WGXCREDITS)/, a different vulnerability than CVE-2015-8384.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/74934	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2015/06/01/7	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2015/12/02/11	mailing-list, x_refsource_MLIST
	https://bugs.exim.org/show_bug.cgi?id=1636	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T05:39:31.991Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2016:1132",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:1132",
               },
               {
                  name: "74934",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/74934",
               },
               {
                  name: "RHSA-2016:2750",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
               },
               {
                  name: "[oss-security] 20150601 CVE-2015-3210: PCRE Library Heap Overflow Vulnerability",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/06/01/7",
               },
               {
                  name: "[oss-security] 20151202 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/12/02/11",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.exim.org/show_bug.cgi?id=1636",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-05-29T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by /^(?P=B)((?P=B)(?J:(?P<B>c)(?P<B>a(?P=B)))>WGXCREDITS)/, a different vulnerability than CVE-2015-8384.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2016:1132",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:1132",
            },
            {
               name: "74934",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/74934",
            },
            {
               name: "RHSA-2016:2750",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
            },
            {
               name: "[oss-security] 20150601 CVE-2015-3210: PCRE Library Heap Overflow Vulnerability",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/06/01/7",
            },
            {
               name: "[oss-security] 20151202 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/12/02/11",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.exim.org/show_bug.cgi?id=1636",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2015-3210",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by /^(?P=B)((?P=B)(?J:(?P<B>c)(?P<B>a(?P=B)))>WGXCREDITS)/, a different vulnerability than CVE-2015-8384.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2016:1132",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2016:1132",
                  },
                  {
                     name: "74934",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/74934",
                  },
                  {
                     name: "RHSA-2016:2750",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
                  },
                  {
                     name: "[oss-security] 20150601 CVE-2015-3210: PCRE Library Heap Overflow Vulnerability",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/06/01/7",
                  },
                  {
                     name: "[oss-security] 20151202 Re: Heap Overflow in PCRE",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/12/02/11",
                  },
                  {
                     name: "https://bugs.exim.org/show_bug.cgi?id=1636",
                     refsource: "CONFIRM",
                     url: "https://bugs.exim.org/show_bug.cgi?id=1636",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2015-3210",
      datePublished: "2016-12-13T16:00:00",
      dateReserved: "2015-04-10T00:00:00",
      dateUpdated: "2024-08-06T05:39:31.991Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8380

Vulnerability from cvelistv5

Published

2015-12-02 01:00

Modified

2024-08-06 08:13

Severity ?

Summary

The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list, x_refsource_MLIST
	https://bugs.exim.org/show_bug.cgi?id=1637	x_refsource_CONFIRM
	https://blog.fuzzing-project.org/29-Heap-Overflow-in-PCRE.html	x_refsource_MISC
	http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173700.html	vendor-advisory, x_refsource_FEDORA
	http://www.securityfocus.com/bid/77695	vdb-entry, x_refsource_BID
	https://bto.bluecoat.com/security-advisory/sa128	x_refsource_CONFIRM
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201607-02	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.587Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.exim.org/show_bug.cgi?id=1637",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://blog.fuzzing-project.org/29-Heap-Overflow-in-PCRE.html",
               },
               {
                  name: "FEDORA-2015-afafa29551",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173700.html",
               },
               {
                  name: "77695",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77695",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \\01 string, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-06-30T16:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.exim.org/show_bug.cgi?id=1637",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://blog.fuzzing-project.org/29-Heap-Overflow-in-PCRE.html",
            },
            {
               name: "FEDORA-2015-afafa29551",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173700.html",
            },
            {
               name: "77695",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77695",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-8380",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \\01 string, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
                  },
                  {
                     name: "https://bugs.exim.org/show_bug.cgi?id=1637",
                     refsource: "CONFIRM",
                     url: "https://bugs.exim.org/show_bug.cgi?id=1637",
                  },
                  {
                     name: "https://blog.fuzzing-project.org/29-Heap-Overflow-in-PCRE.html",
                     refsource: "MISC",
                     url: "https://blog.fuzzing-project.org/29-Heap-Overflow-in-PCRE.html",
                  },
                  {
                     name: "FEDORA-2015-afafa29551",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173700.html",
                  },
                  {
                     name: "77695",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77695",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa128",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa128",
                  },
                  {
                     name: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                     refsource: "CONFIRM",
                     url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                  },
                  {
                     name: "GLSA-201607-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-02",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8380",
      datePublished: "2015-12-02T01:00:00",
      dateReserved: "2015-12-01T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.587Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8385

Vulnerability from cvelistv5

Published

2015-12-02 01:00

Modified

2024-08-06 08:13

Severity ?

Summary

PCRE before 8.38 mishandles the /(?|(\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/85572	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1025.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisory, x_refsource_REDHAT
	https://bto.bluecoat.com/security-advisory/sa128	x_refsource_CONFIRM
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201607-02	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.881Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  name: "85572",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/85572",
               },
               {
                  name: "RHSA-2016:1132",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:1132",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
               },
               {
                  name: "RHSA-2016:1025",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
               },
               {
                  name: "RHSA-2016:2750",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "PCRE before 8.38 mishandles the /(?|(\\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               name: "85572",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/85572",
            },
            {
               name: "RHSA-2016:1132",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:1132",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
            },
            {
               name: "RHSA-2016:1025",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
            },
            {
               name: "RHSA-2016:2750",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-8385",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "PCRE before 8.38 mishandles the /(?|(\\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
                  },
                  {
                     name: "85572",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/85572",
                  },
                  {
                     name: "RHSA-2016:1132",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2016:1132",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                  },
                  {
                     name: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
                     refsource: "CONFIRM",
                     url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
                  },
                  {
                     name: "RHSA-2016:1025",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
                  },
                  {
                     name: "RHSA-2016:2750",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa128",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa128",
                  },
                  {
                     name: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                     refsource: "CONFIRM",
                     url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                  },
                  {
                     name: "GLSA-201607-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-02",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8385",
      datePublished: "2015-12-02T01:00:00",
      dateReserved: "2015-12-01T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.881Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8389

Vulnerability from cvelistv5

Published

2015-12-02 00:00

Modified

2024-08-06 08:13

Severity ?

Summary

PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a denial of service (infinite recursion) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list
	http://www.securityfocus.com/bid/82990	vdb-entry
	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html	vendor-advisory
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731
	https://bto.bluecoat.com/security-advisory/sa128
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup
	https://security.gentoo.org/glsa/201607-02	vendor-advisory
	https://security.netapp.com/advisory/ntap-20230216-0002/

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.555Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  name: "82990",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/82990",
               },
               {
                  name: "FEDORA-2015-eb896290d3",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20230216-0002/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a denial of service (infinite recursion) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-02-16T00:00:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               name: "82990",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securityfocus.com/bid/82990",
            },
            {
               name: "FEDORA-2015-eb896290d3",
               tags: [
                  "vendor-advisory",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html",
            },
            {
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
            },
            {
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20230216-0002/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8389",
      datePublished: "2015-12-02T00:00:00",
      dateReserved: "2015-12-01T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.555Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-3191

Vulnerability from cvelistv5

Published

2016-03-17 23:00

Modified

2024-08-05 23:47

Severity ?

Summary

The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/84810	vdb-entry, x_refsource_BID
	http://vcs.pcre.org/pcre2?view=revision&revision=489	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1025.html	vendor-advisory, x_refsource_REDHAT
	https://bugs.debian.org/815921	x_refsource_CONFIRM
	https://bugs.debian.org/815920	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1311503	x_refsource_CONFIRM
	https://bugs.exim.org/show_bug.cgi?id=1791	x_refsource_CONFIRM
	https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
	https://bto.bluecoat.com/security-advisory/sa128	x_refsource_CONFIRM
	http://vcs.pcre.org/pcre?view=revision&revision=1631	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T23:47:58.389Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "84810",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/84810",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre2?view=revision&revision=489",
               },
               {
                  name: "RHSA-2016:1132",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:1132",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
               },
               {
                  name: "RHSA-2016:1025",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.debian.org/815921",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.debian.org/815920",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1311503",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.exim.org/show_bug.cgi?id=1791",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.tenable.com/security/tns-2016-18",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre?view=revision&revision=1631",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-02-09T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "79363d38-fa19-49d1-9214-5f28da3f3ac5",
            shortName: "debian",
         },
         references: [
            {
               name: "84810",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/84810",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://vcs.pcre.org/pcre2?view=revision&revision=489",
            },
            {
               name: "RHSA-2016:1132",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:1132",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
            },
            {
               name: "RHSA-2016:1025",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.debian.org/815921",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.debian.org/815920",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1311503",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.exim.org/show_bug.cgi?id=1791",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.tenable.com/security/tns-2016-18",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://vcs.pcre.org/pcre?view=revision&revision=1631",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@debian.org",
               ID: "CVE-2016-3191",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "84810",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/84810",
                  },
                  {
                     name: "http://vcs.pcre.org/pcre2?view=revision&revision=489",
                     refsource: "CONFIRM",
                     url: "http://vcs.pcre.org/pcre2?view=revision&revision=489",
                  },
                  {
                     name: "RHSA-2016:1132",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2016:1132",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                  },
                  {
                     name: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
                     refsource: "CONFIRM",
                     url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
                  },
                  {
                     name: "RHSA-2016:1025",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
                  },
                  {
                     name: "https://bugs.debian.org/815921",
                     refsource: "CONFIRM",
                     url: "https://bugs.debian.org/815921",
                  },
                  {
                     name: "https://bugs.debian.org/815920",
                     refsource: "CONFIRM",
                     url: "https://bugs.debian.org/815920",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1311503",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1311503",
                  },
                  {
                     name: "https://bugs.exim.org/show_bug.cgi?id=1791",
                     refsource: "CONFIRM",
                     url: "https://bugs.exim.org/show_bug.cgi?id=1791",
                  },
                  {
                     name: "https://www.tenable.com/security/tns-2016-18",
                     refsource: "CONFIRM",
                     url: "https://www.tenable.com/security/tns-2016-18",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa128",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa128",
                  },
                  {
                     name: "http://vcs.pcre.org/pcre?view=revision&revision=1631",
                     refsource: "CONFIRM",
                     url: "http://vcs.pcre.org/pcre?view=revision&revision=1631",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "79363d38-fa19-49d1-9214-5f28da3f3ac5",
      assignerShortName: "debian",
      cveId: "CVE-2016-3191",
      datePublished: "2016-03-17T23:00:00",
      dateReserved: "2016-03-15T00:00:00",
      dateUpdated: "2024-08-05T23:47:58.389Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-2327

Vulnerability from cvelistv5

Published

2015-12-02 01:00

Modified

2024-08-06 05:10

Severity ?

Summary

PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern and related patterns with certain internal recursive back references, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list, x_refsource_MLIST
	http://www.fortiguard.com/advisory/FG-VD-15-010/	x_refsource_MISC
	http://www.securityfocus.com/bid/74924	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisory, x_refsource_REDHAT
	https://bugs.exim.org/show_bug.cgi?id=1503	x_refsource_CONFIRM
	https://jira.mongodb.org/browse/SERVER-17252	x_refsource_CONFIRM
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T05:10:16.164Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.fortiguard.com/advisory/FG-VD-15-010/",
               },
               {
                  name: "74924",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/74924",
               },
               {
                  name: "RHSA-2016:2750",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.exim.org/show_bug.cgi?id=1503",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://jira.mongodb.org/browse/SERVER-17252",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "PCRE before 8.36 mishandles the /(((a\\2)|(a*)\\g<-1>))*/ pattern and related patterns with certain internal recursive back references, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.fortiguard.com/advisory/FG-VD-15-010/",
            },
            {
               name: "74924",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/74924",
            },
            {
               name: "RHSA-2016:2750",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.exim.org/show_bug.cgi?id=1503",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://jira.mongodb.org/browse/SERVER-17252",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-2327",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "PCRE before 8.36 mishandles the /(((a\\2)|(a*)\\g<-1>))*/ pattern and related patterns with certain internal recursive back references, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
                  },
                  {
                     name: "http://www.fortiguard.com/advisory/FG-VD-15-010/",
                     refsource: "MISC",
                     url: "http://www.fortiguard.com/advisory/FG-VD-15-010/",
                  },
                  {
                     name: "74924",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/74924",
                  },
                  {
                     name: "RHSA-2016:2750",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
                  },
                  {
                     name: "https://bugs.exim.org/show_bug.cgi?id=1503",
                     refsource: "CONFIRM",
                     url: "https://bugs.exim.org/show_bug.cgi?id=1503",
                  },
                  {
                     name: "https://jira.mongodb.org/browse/SERVER-17252",
                     refsource: "CONFIRM",
                     url: "https://jira.mongodb.org/browse/SERVER-17252",
                  },
                  {
                     name: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                     refsource: "CONFIRM",
                     url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-2327",
      datePublished: "2015-12-02T01:00:00",
      dateReserved: "2015-03-18T00:00:00",
      dateUpdated: "2024-08-06T05:10:16.164Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-1283

Vulnerability from cvelistv5

Published

2016-01-03 00:00

Modified

2024-08-05 22:48

Severity ?

Summary

The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisory, x_refsource_REDHAT
	https://bugs.exim.org/show_bug.cgi?id=1767	x_refsource_CONFIRM
	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.343110	vendor-advisory, x_refsource_SLACKWARE
	http://www.securityfocus.com/bid/79825	vdb-entry, x_refsource_BID
	http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178955.html	vendor-advisory, x_refsource_FEDORA
	http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178193.html	vendor-advisory, x_refsource_FEDORA
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
	https://www.tenable.com/security/tns-2017-14	x_refsource_CONFIRM
	https://bto.bluecoat.com/security-advisory/sa128	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1034555	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201607-02	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T22:48:13.788Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2016:1132",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:1132",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.exim.org/show_bug.cgi?id=1767",
               },
               {
                  name: "SSA:2016-172-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SLACKWARE",
                     "x_transferred",
                  ],
                  url: "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.343110",
               },
               {
                  name: "79825",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/79825",
               },
               {
                  name: "FEDORA-2016-f5af8e27ce",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178955.html",
               },
               {
                  name: "FEDORA-2016-65833b5dbc",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178193.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.tenable.com/security/tns-2016-18",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.tenable.com/security/tns-2017-14",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  name: "1034555",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034555",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-01-02T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\\\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\\){97)?J)?J)(?'R'(?'R'\\){99|(:(?|(?'R')(\\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "RHSA-2016:1132",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:1132",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.exim.org/show_bug.cgi?id=1767",
            },
            {
               name: "SSA:2016-172-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SLACKWARE",
               ],
               url: "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.343110",
            },
            {
               name: "79825",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/79825",
            },
            {
               name: "FEDORA-2016-f5af8e27ce",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178955.html",
            },
            {
               name: "FEDORA-2016-65833b5dbc",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178193.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.tenable.com/security/tns-2016-18",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.tenable.com/security/tns-2017-14",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               name: "1034555",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034555",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-1283",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\\\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\\){97)?J)?J)(?'R'(?'R'\\){99|(:(?|(?'R')(\\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2016:1132",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2016:1132",
                  },
                  {
                     name: "https://bugs.exim.org/show_bug.cgi?id=1767",
                     refsource: "CONFIRM",
                     url: "https://bugs.exim.org/show_bug.cgi?id=1767",
                  },
                  {
                     name: "SSA:2016-172-02",
                     refsource: "SLACKWARE",
                     url: "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.343110",
                  },
                  {
                     name: "79825",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/79825",
                  },
                  {
                     name: "FEDORA-2016-f5af8e27ce",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178955.html",
                  },
                  {
                     name: "FEDORA-2016-65833b5dbc",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178193.html",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
                  },
                  {
                     name: "https://www.tenable.com/security/tns-2016-18",
                     refsource: "CONFIRM",
                     url: "https://www.tenable.com/security/tns-2016-18",
                  },
                  {
                     name: "https://www.tenable.com/security/tns-2017-14",
                     refsource: "CONFIRM",
                     url: "https://www.tenable.com/security/tns-2017-14",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa128",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa128",
                  },
                  {
                     name: "1034555",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034555",
                  },
                  {
                     name: "GLSA-201607-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-02",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-1283",
      datePublished: "2016-01-03T00:00:00",
      dateReserved: "2016-01-02T00:00:00",
      dateUpdated: "2024-08-05T22:48:13.788Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-3217

Vulnerability from cvelistv5

Published

2016-12-13 16:00

Modified

2024-08-06 05:39

Severity ?

Summary

PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\.|([^\\\\W_])?)+)+$/.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisory, x_refsource_REDHAT
	http://vcs.pcre.org/pcre?view=revision&revision=1566	x_refsource_CONFIRM
	https://bugs.exim.org/show_bug.cgi?id=1638	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2015/06/03/7	mailing-list, x_refsource_MLIST
	http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1025.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=1228283	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/75018	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T05:39:31.985Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2016:1132",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:1132",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre?view=revision&revision=1566",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.exim.org/show_bug.cgi?id=1638",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  name: "[oss-security] 20150603 CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match()",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/06/03/7",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
               },
               {
                  name: "RHSA-2016:1025",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
               },
               {
                  name: "RHSA-2016:2750",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1228283",
               },
               {
                  name: "75018",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/75018",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-06-03T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\\\.|([^\\\\\\\\W_])?)+)+$/.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-17T16:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2016:1132",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:1132",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://vcs.pcre.org/pcre?view=revision&revision=1566",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.exim.org/show_bug.cgi?id=1638",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               name: "[oss-security] 20150603 CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match()",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/06/03/7",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
            },
            {
               name: "RHSA-2016:1025",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
            },
            {
               name: "RHSA-2016:2750",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1228283",
            },
            {
               name: "75018",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/75018",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2015-3217",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\\\.|([^\\\\\\\\W_])?)+)+$/.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2016:1132",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2016:1132",
                  },
                  {
                     name: "http://vcs.pcre.org/pcre?view=revision&revision=1566",
                     refsource: "CONFIRM",
                     url: "http://vcs.pcre.org/pcre?view=revision&revision=1566",
                  },
                  {
                     name: "https://bugs.exim.org/show_bug.cgi?id=1638",
                     refsource: "CONFIRM",
                     url: "https://bugs.exim.org/show_bug.cgi?id=1638",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                  },
                  {
                     name: "[oss-security] 20150603 CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match()",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/06/03/7",
                  },
                  {
                     name: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
                     refsource: "CONFIRM",
                     url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
                  },
                  {
                     name: "RHSA-2016:1025",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
                  },
                  {
                     name: "RHSA-2016:2750",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1228283",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1228283",
                  },
                  {
                     name: "75018",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/75018",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2015-3217",
      datePublished: "2016-12-13T16:00:00",
      dateReserved: "2015-04-10T00:00:00",
      dateUpdated: "2024-08-06T05:39:31.985Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8395

Vulnerability from cvelistv5

Published

2015-12-02 01:00

Modified

2024-08-06 08:13

Severity ?

Summary

PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and CVE-2015-8392.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisory, x_refsource_REDHAT
	https://bto.bluecoat.com/security-advisory/sa128	x_refsource_CONFIRM
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201607-02	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.879Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  name: "RHSA-2016:1132",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:1132",
               },
               {
                  name: "RHSA-2016:2750",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and CVE-2015-8392.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               name: "RHSA-2016:1132",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:1132",
            },
            {
               name: "RHSA-2016:2750",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-8395",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and CVE-2015-8392.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
                  },
                  {
                     name: "RHSA-2016:1132",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2016:1132",
                  },
                  {
                     name: "RHSA-2016:2750",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa128",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa128",
                  },
                  {
                     name: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                     refsource: "CONFIRM",
                     url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                  },
                  {
                     name: "GLSA-201607-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-02",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8395",
      datePublished: "2015-12-02T01:00:00",
      dateReserved: "2015-12-01T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.879Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8383

Vulnerability from cvelistv5

Published

2015-12-02 00:00

Modified

2024-08-06 08:13

Severity ?

Summary

PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list
	https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisory
	http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisory
	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html	vendor-advisory
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731
	https://bto.bluecoat.com/security-advisory/sa128
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup
	https://security.gentoo.org/glsa/201607-02	vendor-advisory
	https://security.netapp.com/advisory/ntap-20230216-0002/

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.594Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  name: "RHSA-2016:1132",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:1132",
               },
               {
                  name: "RHSA-2016:2750",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
               },
               {
                  name: "FEDORA-2015-eb896290d3",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20230216-0002/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-02-16T00:00:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               name: "RHSA-2016:1132",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:1132",
            },
            {
               name: "RHSA-2016:2750",
               tags: [
                  "vendor-advisory",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
            },
            {
               name: "FEDORA-2015-eb896290d3",
               tags: [
                  "vendor-advisory",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html",
            },
            {
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
            },
            {
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20230216-0002/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8383",
      datePublished: "2015-12-02T00:00:00",
      dateReserved: "2015-12-01T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.594Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-2328

Vulnerability from cvelistv5

Published

2015-12-02 01:00

Modified

2024-08-06 05:10

Severity ?

Summary

PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list, x_refsource_MLIST
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1025.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/74924	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisory, x_refsource_REDHAT
	http://www.fortiguard.com/advisory/FG-VD-15-014/	x_refsource_MISC
	https://jira.mongodb.org/browse/SERVER-17252	x_refsource_CONFIRM
	https://bugs.exim.org/show_bug.cgi?id=1515	x_refsource_CONFIRM
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T05:10:16.260Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
               },
               {
                  name: "RHSA-2016:1025",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
               },
               {
                  name: "74924",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/74924",
               },
               {
                  name: "RHSA-2016:2750",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.fortiguard.com/advisory/FG-VD-15-014/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://jira.mongodb.org/browse/SERVER-17252",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.exim.org/show_bug.cgi?id=1515",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
            },
            {
               name: "RHSA-2016:1025",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
            },
            {
               name: "74924",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/74924",
            },
            {
               name: "RHSA-2016:2750",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.fortiguard.com/advisory/FG-VD-15-014/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://jira.mongodb.org/browse/SERVER-17252",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.exim.org/show_bug.cgi?id=1515",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-2328",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                  },
                  {
                     name: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
                     refsource: "CONFIRM",
                     url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
                  },
                  {
                     name: "RHSA-2016:1025",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
                  },
                  {
                     name: "74924",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/74924",
                  },
                  {
                     name: "RHSA-2016:2750",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
                  },
                  {
                     name: "http://www.fortiguard.com/advisory/FG-VD-15-014/",
                     refsource: "MISC",
                     url: "http://www.fortiguard.com/advisory/FG-VD-15-014/",
                  },
                  {
                     name: "https://jira.mongodb.org/browse/SERVER-17252",
                     refsource: "CONFIRM",
                     url: "https://jira.mongodb.org/browse/SERVER-17252",
                  },
                  {
                     name: "https://bugs.exim.org/show_bug.cgi?id=1515",
                     refsource: "CONFIRM",
                     url: "https://bugs.exim.org/show_bug.cgi?id=1515",
                  },
                  {
                     name: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                     refsource: "CONFIRM",
                     url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-2328",
      datePublished: "2015-12-02T01:00:00",
      dateReserved: "2015-03-18T00:00:00",
      dateUpdated: "2024-08-06T05:10:16.260Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8381

Vulnerability from cvelistv5

Published

2015-12-02 01:00

Modified

2024-08-06 08:13

Severity ?

Summary

The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles the /(?J:(?|(:(?|(?'R')(\k'R')|((?'R')))H'Rk'Rf)|s(?'R'))))/ and /(?J:(?|(:(?|(?'R')(\z(?|(?'R')(\k'R')|((?'R')))k'R')|((?'R')))H'Ak'Rf)|s(?'R')))/ patterns, and related patterns with certain group references, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/76187	vdb-entry, x_refsource_BID
	https://bugs.exim.org/show_bug.cgi?id=1667	x_refsource_CONFIRM
	https://bugs.exim.org/show_bug.cgi?id=1672	x_refsource_CONFIRM
	https://bto.bluecoat.com/security-advisory/sa128	x_refsource_CONFIRM
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201607-02	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.417Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  name: "RHSA-2016:1132",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:1132",
               },
               {
                  name: "RHSA-2016:2750",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
               },
               {
                  name: "76187",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/76187",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.exim.org/show_bug.cgi?id=1667",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.exim.org/show_bug.cgi?id=1672",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles the /(?J:(?|(:(?|(?'R')(\\k'R')|((?'R')))H'Rk'Rf)|s(?'R'))))/ and /(?J:(?|(:(?|(?'R')(\\z(?|(?'R')(\\k'R')|((?'R')))k'R')|((?'R')))H'Ak'Rf)|s(?'R')))/ patterns, and related patterns with certain group references, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               name: "RHSA-2016:1132",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:1132",
            },
            {
               name: "RHSA-2016:2750",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
            },
            {
               name: "76187",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/76187",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.exim.org/show_bug.cgi?id=1667",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.exim.org/show_bug.cgi?id=1672",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-8381",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles the /(?J:(?|(:(?|(?'R')(\\k'R')|((?'R')))H'Rk'Rf)|s(?'R'))))/ and /(?J:(?|(:(?|(?'R')(\\z(?|(?'R')(\\k'R')|((?'R')))k'R')|((?'R')))H'Ak'Rf)|s(?'R')))/ patterns, and related patterns with certain group references, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
                  },
                  {
                     name: "RHSA-2016:1132",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2016:1132",
                  },
                  {
                     name: "RHSA-2016:2750",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
                  },
                  {
                     name: "76187",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/76187",
                  },
                  {
                     name: "https://bugs.exim.org/show_bug.cgi?id=1667",
                     refsource: "CONFIRM",
                     url: "https://bugs.exim.org/show_bug.cgi?id=1667",
                  },
                  {
                     name: "https://bugs.exim.org/show_bug.cgi?id=1672",
                     refsource: "CONFIRM",
                     url: "https://bugs.exim.org/show_bug.cgi?id=1672",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa128",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa128",
                  },
                  {
                     name: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                     refsource: "CONFIRM",
                     url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                  },
                  {
                     name: "GLSA-201607-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-02",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8381",
      datePublished: "2015-12-02T01:00:00",
      dateReserved: "2015-12-01T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.417Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-2325

Vulnerability from cvelistv5

Published

2020-01-14 16:46

Modified

2024-08-06 05:10

Severity ?

Summary

The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large number of times within a repeated outer group that has a zero minimum quantifier.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html	x_refsource_MISC
	https://bugs.exim.org/show_bug.cgi?id=1591	x_refsource_MISC
	https://www.pcre.org/original/changelog.txt	x_refsource_CONFIRM
	https://fortiguard.com/zeroday/FG-VD-15-015	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T05:10:15.978Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugs.exim.org/show_bug.cgi?id=1591",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.pcre.org/original/changelog.txt",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://fortiguard.com/zeroday/FG-VD-15-015",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-05-12T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large number of times within a repeated outer group that has a zero minimum quantifier.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-01-14T16:46:55",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugs.exim.org/show_bug.cgi?id=1591",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.pcre.org/original/changelog.txt",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://fortiguard.com/zeroday/FG-VD-15-015",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-2325",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large number of times within a repeated outer group that has a zero minimum quantifier.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html",
                     refsource: "MISC",
                     url: "http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html",
                  },
                  {
                     name: "https://bugs.exim.org/show_bug.cgi?id=1591",
                     refsource: "MISC",
                     url: "https://bugs.exim.org/show_bug.cgi?id=1591",
                  },
                  {
                     name: "https://www.pcre.org/original/changelog.txt",
                     refsource: "CONFIRM",
                     url: "https://www.pcre.org/original/changelog.txt",
                  },
                  {
                     name: "https://fortiguard.com/zeroday/FG-VD-15-015",
                     refsource: "MISC",
                     url: "https://fortiguard.com/zeroday/FG-VD-15-015",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-2325",
      datePublished: "2020-01-14T16:46:55",
      dateReserved: "2015-03-18T00:00:00",
      dateUpdated: "2024-08-06T05:10:15.978Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8382

Vulnerability from cvelistv5

Published

2015-12-02 01:00

Modified

2024-08-06 08:13

Severity ?

Summary

The match function in pcre_exec.c in PCRE before 8.37 mishandles the /(?:((abcd))|(((?:(?:(?:(?:abc|(?:abcdef))))b)abcdefghi)abc)|((*ACCEPT)))/ pattern and related patterns involving (*ACCEPT), which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (partially initialized memory and application crash) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-2547.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1187225	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/76157	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2015/08/04/3	mailing-list, x_refsource_MLIST
	https://bugs.exim.org/show_bug.cgi?id=1537	x_refsource_CONFIRM
	http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=c351b47ce85a3a147cfa801fa9f0149ab4160834	x_refsource_CONFIRM
	https://bto.bluecoat.com/security-advisory/sa128	x_refsource_CONFIRM
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup	x_refsource_CONFIRM
	http://vcs.pcre.org/pcre/code/trunk/pcre_exec.c?r1=1502&r2=1510	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.894Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1187225",
               },
               {
                  name: "76157",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/76157",
               },
               {
                  name: "[oss-security] 20150804 Re: CVE Request: Information disclosure in pcre",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/08/04/3",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.exim.org/show_bug.cgi?id=1537",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=c351b47ce85a3a147cfa801fa9f0149ab4160834",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/pcre_exec.c?r1=1502&r2=1510",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-08-04T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The match function in pcre_exec.c in PCRE before 8.37 mishandles the /(?:((abcd))|(((?:(?:(?:(?:abc|(?:abcdef))))b)abcdefghi)abc)|((*ACCEPT)))/ pattern and related patterns involving (*ACCEPT), which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (partially initialized memory and application crash) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-2547.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2016-12-23T21:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1187225",
            },
            {
               name: "76157",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/76157",
            },
            {
               name: "[oss-security] 20150804 Re: CVE Request: Information disclosure in pcre",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/08/04/3",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.exim.org/show_bug.cgi?id=1537",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=c351b47ce85a3a147cfa801fa9f0149ab4160834",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://vcs.pcre.org/pcre/code/trunk/pcre_exec.c?r1=1502&r2=1510",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-8382",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The match function in pcre_exec.c in PCRE before 8.37 mishandles the /(?:((abcd))|(((?:(?:(?:(?:abc|(?:abcdef))))b)abcdefghi)abc)|((*ACCEPT)))/ pattern and related patterns involving (*ACCEPT), which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (partially initialized memory and application crash) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-2547.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1187225",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1187225",
                  },
                  {
                     name: "76157",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/76157",
                  },
                  {
                     name: "[oss-security] 20150804 Re: CVE Request: Information disclosure in pcre",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/08/04/3",
                  },
                  {
                     name: "https://bugs.exim.org/show_bug.cgi?id=1537",
                     refsource: "CONFIRM",
                     url: "https://bugs.exim.org/show_bug.cgi?id=1537",
                  },
                  {
                     name: "http://git.php.net/?p=php-src.git;a=commit;h=c351b47ce85a3a147cfa801fa9f0149ab4160834",
                     refsource: "CONFIRM",
                     url: "http://git.php.net/?p=php-src.git;a=commit;h=c351b47ce85a3a147cfa801fa9f0149ab4160834",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa128",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa128",
                  },
                  {
                     name: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                     refsource: "CONFIRM",
                     url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                  },
                  {
                     name: "http://vcs.pcre.org/pcre/code/trunk/pcre_exec.c?r1=1502&r2=1510",
                     refsource: "CONFIRM",
                     url: "http://vcs.pcre.org/pcre/code/trunk/pcre_exec.c?r1=1502&r2=1510",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8382",
      datePublished: "2015-12-02T01:00:00",
      dateReserved: "2015-12-01T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.894Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8384

Vulnerability from cvelistv5

Published

2015-12-02 01:00

Modified

2024-08-06 08:13

Severity ?

Summary

PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns with certain recursive back references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8392 and CVE-2015-8395.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisory, x_refsource_REDHAT
	https://bto.bluecoat.com/security-advisory/sa128	x_refsource_CONFIRM
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201607-02	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.536Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  name: "RHSA-2016:1132",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:1132",
               },
               {
                  name: "RHSA-2016:2750",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\\g{d}))/ pattern and related patterns with certain recursive back references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8392 and CVE-2015-8395.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               name: "RHSA-2016:1132",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:1132",
            },
            {
               name: "RHSA-2016:2750",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-8384",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\\g{d}))/ pattern and related patterns with certain recursive back references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8392 and CVE-2015-8395.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
                  },
                  {
                     name: "RHSA-2016:1132",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2016:1132",
                  },
                  {
                     name: "RHSA-2016:2750",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa128",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa128",
                  },
                  {
                     name: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                     refsource: "CONFIRM",
                     url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                  },
                  {
                     name: "GLSA-201607-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-02",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8384",
      datePublished: "2015-12-02T01:00:00",
      dateReserved: "2015-12-01T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.536Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2014-8964

Vulnerability from cvelistv5

Published

2014-12-16 18:00

Modified

2024-08-06 13:33

Severity ?

Summary

Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats.

References

▼	URL	Tags
	http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147474.html	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/71206	vdb-entry, x_refsource_BID
	http://www.exim.org/viewvc/pcre?view=revision&revision=1513	x_refsource_CONFIRM
	http://advisories.mageia.org/MGASA-2014-0534.html	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147511.html	vendor-advisory, x_refsource_FEDORA
	http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145843.html	vendor-advisory, x_refsource_FEDORA
	http://www.openwall.com/lists/oss-security/2014/11/21/6	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2015-0330.html	vendor-advisory, x_refsource_REDHAT
	http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147516.html	vendor-advisory, x_refsource_FEDORA
	http://www.mandriva.com/security/advisories?name=MDVSA-2015:002	vendor-advisory, x_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=MDVSA-2015:137	vendor-advisory, x_refsource_MANDRIVA
	https://bugzilla.redhat.com/show_bug.cgi?id=1166147	x_refsource_CONFIRM
	http://bugs.exim.org/show_bug.cgi?id=1546	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201607-02	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T13:33:12.895Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "FEDORA-2014-17624",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147474.html",
               },
               {
                  name: "openSUSE-SU-2015:0858",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
               },
               {
                  name: "71206",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/71206",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.exim.org/viewvc/pcre?view=revision&revision=1513",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://advisories.mageia.org/MGASA-2014-0534.html",
               },
               {
                  name: "FEDORA-2014-17642",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147511.html",
               },
               {
                  name: "FEDORA-2014-15573",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145843.html",
               },
               {
                  name: "[oss-security] 20141121 Re: CVE request: heap buffer overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2014/11/21/6",
               },
               {
                  name: "RHSA-2015:0330",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-0330.html",
               },
               {
                  name: "FEDORA-2014-17626",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147516.html",
               },
               {
                  name: "MDVSA-2015:002",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_MANDRIVA",
                     "x_transferred",
                  ],
                  url: "http://www.mandriva.com/security/advisories?name=MDVSA-2015:002",
               },
               {
                  name: "MDVSA-2015:137",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_MANDRIVA",
                     "x_transferred",
                  ],
                  url: "http://www.mandriva.com/security/advisories?name=MDVSA-2015:137",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1166147",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://bugs.exim.org/show_bug.cgi?id=1546",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2014-11-19T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-06-30T16:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "FEDORA-2014-17624",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147474.html",
            },
            {
               name: "openSUSE-SU-2015:0858",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
            },
            {
               name: "71206",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/71206",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.exim.org/viewvc/pcre?view=revision&revision=1513",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://advisories.mageia.org/MGASA-2014-0534.html",
            },
            {
               name: "FEDORA-2014-17642",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147511.html",
            },
            {
               name: "FEDORA-2014-15573",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145843.html",
            },
            {
               name: "[oss-security] 20141121 Re: CVE request: heap buffer overflow in PCRE",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2014/11/21/6",
            },
            {
               name: "RHSA-2015:0330",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-0330.html",
            },
            {
               name: "FEDORA-2014-17626",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147516.html",
            },
            {
               name: "MDVSA-2015:002",
               tags: [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
               ],
               url: "http://www.mandriva.com/security/advisories?name=MDVSA-2015:002",
            },
            {
               name: "MDVSA-2015:137",
               tags: [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
               ],
               url: "http://www.mandriva.com/security/advisories?name=MDVSA-2015:137",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1166147",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://bugs.exim.org/show_bug.cgi?id=1546",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2014-8964",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "FEDORA-2014-17624",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147474.html",
                  },
                  {
                     name: "openSUSE-SU-2015:0858",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
                  },
                  {
                     name: "71206",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/71206",
                  },
                  {
                     name: "http://www.exim.org/viewvc/pcre?view=revision&revision=1513",
                     refsource: "CONFIRM",
                     url: "http://www.exim.org/viewvc/pcre?view=revision&revision=1513",
                  },
                  {
                     name: "http://advisories.mageia.org/MGASA-2014-0534.html",
                     refsource: "CONFIRM",
                     url: "http://advisories.mageia.org/MGASA-2014-0534.html",
                  },
                  {
                     name: "FEDORA-2014-17642",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147511.html",
                  },
                  {
                     name: "FEDORA-2014-15573",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145843.html",
                  },
                  {
                     name: "[oss-security] 20141121 Re: CVE request: heap buffer overflow in PCRE",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2014/11/21/6",
                  },
                  {
                     name: "RHSA-2015:0330",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2015-0330.html",
                  },
                  {
                     name: "FEDORA-2014-17626",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147516.html",
                  },
                  {
                     name: "MDVSA-2015:002",
                     refsource: "MANDRIVA",
                     url: "http://www.mandriva.com/security/advisories?name=MDVSA-2015:002",
                  },
                  {
                     name: "MDVSA-2015:137",
                     refsource: "MANDRIVA",
                     url: "http://www.mandriva.com/security/advisories?name=MDVSA-2015:137",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1166147",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1166147",
                  },
                  {
                     name: "http://bugs.exim.org/show_bug.cgi?id=1546",
                     refsource: "CONFIRM",
                     url: "http://bugs.exim.org/show_bug.cgi?id=1546",
                  },
                  {
                     name: "GLSA-201607-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-02",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2014-8964",
      datePublished: "2014-12-16T18:00:00",
      dateReserved: "2014-11-18T00:00:00",
      dateUpdated: "2024-08-06T13:33:12.895Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8390

Vulnerability from cvelistv5

Published

2015-12-02 00:00

Modified

2024-08-06 08:13

Severity ?

Summary

PCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote attackers to cause a denial of service (uninitialized memory read) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list
	http://www.securityfocus.com/bid/82990	vdb-entry
	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html	vendor-advisory
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731
	https://bto.bluecoat.com/security-advisory/sa128
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup
	https://security.gentoo.org/glsa/201607-02	vendor-advisory
	https://security.netapp.com/advisory/ntap-20230216-0002/

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.878Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  name: "82990",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/82990",
               },
               {
                  name: "FEDORA-2015-eb896290d3",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20230216-0002/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "PCRE before 8.38 mishandles the [: and \\\\ substrings in character classes, which allows remote attackers to cause a denial of service (uninitialized memory read) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-02-16T00:00:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               name: "82990",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securityfocus.com/bid/82990",
            },
            {
               name: "FEDORA-2015-eb896290d3",
               tags: [
                  "vendor-advisory",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html",
            },
            {
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
            },
            {
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20230216-0002/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8390",
      datePublished: "2015-12-02T00:00:00",
      dateReserved: "2015-12-01T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.878Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8387

Vulnerability from cvelistv5

Published

2015-12-02 00:00

Modified

2024-08-06 08:13

Severity ?

Summary

PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list
	http://www.securityfocus.com/bid/82990	vdb-entry
	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html	vendor-advisory
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731
	https://bto.bluecoat.com/security-advisory/sa128
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup
	https://security.gentoo.org/glsa/201607-02	vendor-advisory
	https://security.netapp.com/advisory/ntap-20230216-0002/

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.663Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  name: "82990",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/82990",
               },
               {
                  name: "FEDORA-2015-eb896290d3",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20230216-0002/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-02-16T00:00:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               name: "82990",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securityfocus.com/bid/82990",
            },
            {
               name: "FEDORA-2015-eb896290d3",
               tags: [
                  "vendor-advisory",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html",
            },
            {
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
            },
            {
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20230216-0002/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8387",
      datePublished: "2015-12-02T00:00:00",
      dateReserved: "2015-12-01T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.663Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8388

Vulnerability from cvelistv5

Published

2015-12-02 01:00

Modified

2024-08-06 08:13

Severity ?

Summary

PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1025.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/85576	vdb-entry, x_refsource_BID
	https://bto.bluecoat.com/security-advisory/sa128	x_refsource_CONFIRM
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201607-02	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.883Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  name: "RHSA-2016:1132",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:1132",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
               },
               {
                  name: "RHSA-2016:1025",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
               },
               {
                  name: "RHSA-2016:2750",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
               },
               {
                  name: "85576",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/85576",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               name: "RHSA-2016:1132",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:1132",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
            },
            {
               name: "RHSA-2016:1025",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
            },
            {
               name: "RHSA-2016:2750",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
            },
            {
               name: "85576",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/85576",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-8388",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
                  },
                  {
                     name: "RHSA-2016:1132",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2016:1132",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                  },
                  {
                     name: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
                     refsource: "CONFIRM",
                     url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
                  },
                  {
                     name: "RHSA-2016:1025",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
                  },
                  {
                     name: "RHSA-2016:2750",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
                  },
                  {
                     name: "85576",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/85576",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa128",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa128",
                  },
                  {
                     name: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                     refsource: "CONFIRM",
                     url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                  },
                  {
                     name: "GLSA-201607-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-02",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8388",
      datePublished: "2015-12-02T01:00:00",
      dateReserved: "2015-12-01T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.883Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8392

Vulnerability from cvelistv5

Published

2015-12-02 01:00

Modified

2024-08-06 08:13

Severity ?

Summary

PCRE before 8.38 mishandles certain instances of the (?| substring, which allows remote attackers to cause a denial of service (unintended recursion and buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and CVE-2015-8395.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisory, x_refsource_REDHAT
	https://bto.bluecoat.com/security-advisory/sa128	x_refsource_CONFIRM
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201607-02	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.675Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  name: "RHSA-2016:1132",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:1132",
               },
               {
                  name: "RHSA-2016:2750",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "PCRE before 8.38 mishandles certain instances of the (?| substring, which allows remote attackers to cause a denial of service (unintended recursion and buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and CVE-2015-8395.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               name: "RHSA-2016:1132",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:1132",
            },
            {
               name: "RHSA-2016:2750",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-8392",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "PCRE before 8.38 mishandles certain instances of the (?| substring, which allows remote attackers to cause a denial of service (unintended recursion and buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and CVE-2015-8395.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
                  },
                  {
                     name: "RHSA-2016:1132",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2016:1132",
                  },
                  {
                     name: "RHSA-2016:2750",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa128",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa128",
                  },
                  {
                     name: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                     refsource: "CONFIRM",
                     url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
                  },
                  {
                     name: "GLSA-201607-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-02",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8392",
      datePublished: "2015-12-02T01:00:00",
      dateReserved: "2015-12-01T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.675Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8391

Vulnerability from cvelistv5

Published

2015-12-02 00:00

Modified

2024-08-06 08:13

Severity ?

Summary

The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list
	https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisory
	http://www.securityfocus.com/bid/82990	vdb-entry
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
	http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886
	http://rhn.redhat.com/errata/RHSA-2016-1025.html	vendor-advisory
	http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisory
	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html	vendor-advisory
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731
	https://bto.bluecoat.com/security-advisory/sa128
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup
	https://security.gentoo.org/glsa/201607-02	vendor-advisory
	https://security.netapp.com/advisory/ntap-20230216-0002/

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.678Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  name: "RHSA-2016:1132",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:1132",
               },
               {
                  name: "82990",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/82990",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
               },
               {
                  name: "RHSA-2016:1025",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
               },
               {
                  name: "RHSA-2016:2750",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
               },
               {
                  name: "FEDORA-2015-eb896290d3",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20230216-0002/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-02-16T00:00:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               name: "RHSA-2016:1132",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:1132",
            },
            {
               name: "82990",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securityfocus.com/bid/82990",
            },
            {
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
            },
            {
               name: "RHSA-2016:1025",
               tags: [
                  "vendor-advisory",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
            },
            {
               name: "RHSA-2016:2750",
               tags: [
                  "vendor-advisory",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
            },
            {
               name: "FEDORA-2015-eb896290d3",
               tags: [
                  "vendor-advisory",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html",
            },
            {
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
            },
            {
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20230216-0002/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8391",
      datePublished: "2015-12-02T00:00:00",
      dateReserved: "2015-12-01T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.678Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8394

Vulnerability from cvelistv5

Published

2015-12-02 00:00

Modified

2024-08-06 08:13

Severity ?

Summary

PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list
	http://www.securityfocus.com/bid/82990	vdb-entry
	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html	vendor-advisory
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731
	https://bto.bluecoat.com/security-advisory/sa128
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup
	https://security.gentoo.org/glsa/201607-02	vendor-advisory
	https://security.netapp.com/advisory/ntap-20230216-0002/

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.646Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  name: "82990",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/82990",
               },
               {
                  name: "FEDORA-2015-eb896290d3",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20230216-0002/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-02-16T00:00:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               name: "82990",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securityfocus.com/bid/82990",
            },
            {
               name: "FEDORA-2015-eb896290d3",
               tags: [
                  "vendor-advisory",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html",
            },
            {
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
            },
            {
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20230216-0002/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8394",
      datePublished: "2015-12-02T00:00:00",
      dateReserved: "2015-12-01T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.646Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8386

Vulnerability from cvelistv5

Published

2015-12-02 00:00

Modified

2024-08-06 08:13

Severity ?

Summary

PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/11/29/1	mailing-list
	https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisory
	http://www.securityfocus.com/bid/82990	vdb-entry
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
	http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886
	http://rhn.redhat.com/errata/RHSA-2016-1025.html	vendor-advisory
	http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisory
	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html	vendor-advisory
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731
	https://bto.bluecoat.com/security-advisory/sa128
	http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup
	https://security.gentoo.org/glsa/201607-02	vendor-advisory
	https://security.netapp.com/advisory/ntap-20230216-0002/

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.538Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
               },
               {
                  name: "RHSA-2016:1132",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:1132",
               },
               {
                  name: "82990",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/82990",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
               },
               {
                  name: "RHSA-2016:1025",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
               },
               {
                  name: "RHSA-2016:2750",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
               },
               {
                  name: "FEDORA-2015-eb896290d3",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa128",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
               },
               {
                  name: "GLSA-201607-02",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-02",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20230216-0002/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-02-16T00:00:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20151128 Re: Heap Overflow in PCRE",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/29/1",
            },
            {
               name: "RHSA-2016:1132",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:1132",
            },
            {
               name: "82990",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securityfocus.com/bid/82990",
            },
            {
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               url: "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
            },
            {
               name: "RHSA-2016:1025",
               tags: [
                  "vendor-advisory",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1025.html",
            },
            {
               name: "RHSA-2016:2750",
               tags: [
                  "vendor-advisory",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
            },
            {
               name: "FEDORA-2015-eb896290d3",
               tags: [
                  "vendor-advisory",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html",
            },
            {
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
            },
            {
               url: "https://bto.bluecoat.com/security-advisory/sa128",
            },
            {
               url: "http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup",
            },
            {
               name: "GLSA-201607-02",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/201607-02",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20230216-0002/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8386",
      datePublished: "2015-12-02T00:00:00",
      dateReserved: "2015-12-01T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.538Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature