Fluid Attacks Database

Description

pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
nuget	pcre.symbols	=10.23	-
debian 12	pcre2	>=0 <10.31-1	10.31-1
debian 13	pcre2	>=0 <10.31-1	10.31-1
debian 11	pcre2	>=0 <10.31-1	10.31-1
debian 14	pcre2	>=0 <10.31-1	10.31-1
rpm rhel7	pcre2	-	-

Aliases

1. CVE-2017-87862. NVD-2017-87863. OSV-2017-87864. OSV-DEBIAN-2017-87865. GCVE-2017-87866. SECURITY-TRACKER-CVE-2017-8786

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.