CVE:CVE-2015-8391
CNNVD:CNNVD-201512-020
PCRE（Perl Compatible Regular Expressions）是软件开发者Philip Hazel所研发的一个使用C语言编写的开源正则表达式函数库。
PCRE 8.38之前版本的pcre_compile.c文件中的‘pcre_compile’函数存在安全漏洞，该漏洞源于程序没有正确处理特定的‘[:’嵌套。远程攻击者可借助特制的正则表达式利用该漏洞造成拒绝服务（CPU消耗）。
solution:Upgrade pcre pcre to a higher version than 8.38,and avoid the version (,8.38); Upgrade oracle linux to a higher version than 7,and avoid the version 7; Upgrade fedoraproject fedora to a higher version than 22,and avoid the version 22; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.2,7.3,7.4,7.5,7.6,7.7,and avoid the version 7.2,7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,7.3,7.4,7.6,7.7,and avoid the version 7.2,7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.2,7.3,7.6,7.7,and avoid the version 7.2,7.3,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade php php to a higher version than 5.5.32,5.6.18,7.0.3,and avoid the version [5.5.0,5.5.32),[5.6.0,5.6.18),[7.0.0,7.0.3)