Description
pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression.
Metrics
CVSS 3.0 9.8/10
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- https://blogs.gentoo.org/ago/2017/04/29/libpcre-heap-based-buffer-overflow-write-in-pcre2test-c/Exploit, Patch, Third Party Advisory, VDB Entry
- https://bugs.exim.org/show_bug.cgi?id=2079Exploit, Issue Tracking, Third Party Advisory, VDB Entry
- https://security.gentoo.org/glsa/201710-09
- https://vcs.pcre.org/pcre2?view=revision&revision=696Patch, Vendor Advisory
- https://vcs.pcre.org/pcre2?view=revision&revision=697Patch, Vendor Advisory
- https://blogs.gentoo.org/ago/2017/04/29/libpcre-heap-based-buffer-overflow-write-in-pcre2test-c/Exploit, Patch, Third Party Advisory, VDB Entry
- https://bugs.exim.org/show_bug.cgi?id=2079Exploit, Issue Tracking, Third Party Advisory, VDB Entry
- https://security.gentoo.org/glsa/201710-09
- https://vcs.pcre.org/pcre2?view=revision&revision=696Patch, Vendor Advisory
- https://vcs.pcre.org/pcre2?view=revision&revision=697Patch, Vendor Advisory
Timeline
- Published
- May 5, 2017
- Last modified
- Jun 17, 2026
- NVD status
- Modified