CVE-2017-6004
Fixed in a distro release EPSS 5%
The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled version) allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted regular expression.
Products: pcre
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pcre3 | 2:8.39-2.1 |
| SUSE HPE Helion OpenStack 8 | pcre | 8.45-8.7.1 |
| SUSE HPE Helion OpenStack 8 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise High Availability Extension 12 SP3 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP4 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP5 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server 12 SP3-BCL | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server 12 SP5 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP5 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | pcre | 8.45-8.7.1 |
| SUSE OpenStack Cloud 8 | pcre | 8.45-8.7.1 |
| SUSE OpenStack Cloud 8 | selinux-policy | 20140730-36.5.2 |
| SUSE OpenStack Cloud 9 | pcre | 8.45-8.7.1 |
| SUSE OpenStack Cloud 9 | selinux-policy | 20140730-36.5.2 |
| SUSE OpenStack Cloud Crowbar 8 | pcre | 8.45-8.7.1 |
| SUSE OpenStack Cloud Crowbar 8 | selinux-policy | 20140730-36.5.2 |
| SUSE OpenStack Cloud Crowbar 9 | pcre | 8.45-8.7.1 |
| SUSE OpenStack Cloud Crowbar 9 | selinux-policy | 20140730-36.5.2 |
| Ubuntu Pro 16.04 LTS | pcre3 | 2:8.38-3.1ubuntu0.1~esm2 |