CVE-2017-7244: Input Validation
An invalid memory read flaw was found in PCRE. An attacker could use a crafted file that, when processed by PCRE, would crash the application using the PCRE library.
Other sources
The pcre32xclass function in pcrexclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7244?
CVE-2017-7244 has a severity rating of High due to its potential for causing denial of service.
How do I fix CVE-2017-7244?
To fix CVE-2017-7244, upgrade to PCRE version 8.41 or later which addresses the invalid memory read flaw.
What types of applications are affected by CVE-2017-7244?
Applications that utilize the PCRE library, specifically versions prior to 8.41, are vulnerable to CVE-2017-7244.
Can CVE-2017-7244 be exploited remotely?
Yes, CVE-2017-7244 can be exploited remotely by attackers using crafted input files.
What is the potential impact of CVE-2017-7244?
The potential impact of CVE-2017-7244 includes application crashes leading to denial of service.