CVE Catalog

CVE-2017-8786

Critical
Published: Translated: NVD NIST

Summary

The pcre2test.c file in PCRE2 version 10.23 contains a vulnerability that allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression.

Risk Assessment

Organizations may be exposed to attacks that lead to denial of service, affecting the availability of their systems.

Recommendation

It is recommended to update to the latest version of PCRE2 to mitigate this vulnerability.

Original NVD description (English source)

pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS