CVE-2017-8786

NONE EPSS 89.4%
Published May 5, 20179y ago · Modified Jun 17, 20262w ago
Find Similar
Published May 5, 2017 9y ago
Last Modified Jun 17, 2026 2w ago

Description

pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression.

Threat Intelligence

EPSS Exploit Probability
89.4% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer Memory Safety

Affected Products 1

VendorProductVersionRange
pcrepcre210.23any

References 5

  • blogs.gentoo.org https://blogs.gentoo.org/ago/2017/04/29/libpcre-heap-based-buffer-overflow-write-in-pcre2test-c/
    ExploitPatchThird Party AdvisoryVDB Entry
  • bugs.exim.org https://bugs.exim.org/show_bug.cgi?id=2079
    ExploitIssue TrackingThird Party AdvisoryVDB Entry
  • security.gentoo.org https://security.gentoo.org/glsa/201710-09
  • vcs.pcre.org https://vcs.pcre.org/pcre2?view=revision&revision=696
    PatchVendor Advisory
  • vcs.pcre.org https://vcs.pcre.org/pcre2?view=revision&revision=697
    PatchVendor Advisory

Remediation

  • blogs.gentoo.org https://blogs.gentoo.org/ago/2017/04/29/libpcre-heap-based-buffer-overflow-write-in-pcre2test-c/
    ExploitPatchThird Party AdvisoryVDB Entry
  • vcs.pcre.org https://vcs.pcre.org/pcre2?view=revision&revision=696
    PatchVendor Advisory
  • vcs.pcre.org https://vcs.pcre.org/pcre2?view=revision&revision=697
    PatchVendor Advisory