CVE-2017-16231

pcre: self-recursive call in match() in pcre_exec.c leads to denial of service

Published Mar 17, 2019 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Description
In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report, noting that there are options that can be used to limit the amount of stack that is used

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 8:20 PM
Reserved
Oct 30, 2017, 12:00 AM
Status
Modified
Published
Mar 21, 2019, 3:59 PM
Modified
Jun 17, 2026, 1:09 AM
Severity
Public date
Nov 1, 2017, 12:00 AM