CVE Catalog

CVE-2017-13846

Critical
Published: Translated: NVD NIST

Summary

An issue was discovered in certain Apple products, including macOS before 10.13.1, related to the third-party 'PCRE' product. Versions before 8.40 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

Risk Assessment

Organizations may be exposed to attacks that lead to application crashes, affecting service availability. Additionally, there is a risk of unspecified impacts that could affect system security.

Recommendation

It is recommended to update to the latest version of macOS and to update the PCRE component to version 8.40 or later to minimize risk.

Original NVD description (English source)

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the third-party "PCRE" product. Versions before 8.40 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS