CVE-2017-11164: High severity pcre vulnerability
Published Jul 11, 2017
·Updated
In PCRE 8.41, the OPKETRMAX feature in the match function in pcreexec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression.
Affected Software
1 affected component
PCRE PCRE=8.41
Event History
Jul 11, 2017
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-11164?
CVE-2017-11164 is classified as a high severity vulnerability due to the potential for stack exhaustion.
2
How do I fix CVE-2017-11164?
To mitigate CVE-2017-11164, update PCRE to a version later than 8.41 that does not contain this vulnerability.
3
What software is affected by CVE-2017-11164?
CVE-2017-11164 affects PCRE version 8.41, which is a Perl Compatible Regular Expressions library.
4
What type of attack does CVE-2017-11164 enable?
CVE-2017-11164 enables attackers to cause stack exhaustion through crafted regular expressions.
5
When was CVE-2017-11164 disclosed?
CVE-2017-11164 was disclosed on July 11, 2017.