CVE-2017-8399 PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a "pattern with very many captures."
CriticalCVSS 9.8
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a "pattern with very many captures."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PCRE2 | < 10.30 | 10.30 |
References
- 98315 third-party-advisory vdb-entry
- bugs.chromium.org third-party-advisory
- GLSA-201710-09 third-party-advisory vendor-advisory
- vcs.pcre.org
- vcs.pcre.org patch vendor-advisory
- Debian Security Tracker CVE-2017-8399 vendor-advisory