Denial of Service Vulnerability in PCRE1 and PCRE2 Products by Vendor
CVE-2017-7186

7.5HIGH

Key Information:

Vendor

Pcre

Status
Pcre2
Pcre
Vendor
CVE Published:
20 March 2017

What is CVE-2017-7186?

The vulnerability in libpcre1 and libpcre2 allows remote attackers to exploit an invalid Unicode property lookup, potentially leading to a denial of service through application crashes caused by segmentation violations. This issue significantly impacts the stability and security of applications using these libraries.

References

https://bugs.exim.org/show_bug.cgi?id=2052
x_refsource_CONFIRM
https://security.gentoo.org/glsa/201710-09
vendor-advisoryx_refsource_GENTOO
https://vcs.pcre.org/pcre/code/trunk/pcre_internal.h?r1=1...
x_refsource_CONFIRM

EPSS Score

5% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.