CVE-2017-7246: vulnerability facts

CVE-2017-7246

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified other impact via a crafted file.

CVSS 7.8 · High · EPSS 2.6%

Published: 2017-03-23T21:00:00.000Z
Updated: 2024-08-05T15:56:36.170Z

Stack: system

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
pcre3 Debian:12
Versions
- 2:8.39-15
- 2:8.39-15.1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published

Original sources

http://www.securityfocus.com/bid/97067
https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/
https://access.redhat.com/errata/RHSA-2018:2486
https://security.gentoo.org/glsa/201710-25
https://nvd.nist.gov/vuln/detail/CVE-2017-7246

Check your server →

CVE-2017-7246

Affected products and versions

n/a

pcre3 Debian:12

Original sources