CVE-2015-8393: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days.

pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client.

Affected products

• Fedoraproject Fedora: version 22 only
• Pcre Perl Compatible Regular Expression Library: up to and including 8.37
• PHP PHP: from 5.5.0, before 5.5.32 (fixed in 5.5.32); from 5.6.0, before 5.6.18 (fixed in 5.6.18); from 7.0.0, before 7.0.3 (fixed in 7.0.3)

Published 2015-12-02. Last modified 2026-06-17.