CVE-2017-7186
Fixed in a distro release EPSS 5%
libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode property lookup.
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | pcre | 8.40-r2 |
| Alpine 3.11 | pcre | 8.40-r2 |
| Alpine 3.12 | pcre | 8.40-r2 |
| Alpine 3.13 | pcre | 8.40-r2 |
| Alpine 3.14 | pcre | 8.40-r2 |
| Alpine 3.15 | pcre | 8.40-r2 |
| Alpine 3.16 | pcre | 8.40-r2 |
| Alpine 3.17 | pcre | 8.40-r2 |
| Alpine 3.18 | pcre | 8.40-r2 |
| Alpine 3.19 | pcre | 8.40-r2 |
| Alpine 3.20 | pcre | 8.40-r2 |
| Alpine 3.21 | pcre | 8.40-r2 |
| Alpine 3.22 | pcre | 8.40-r2 |
| Alpine 3.23 | pcre | 8.40-r2 |
| Alpine 3.24 | pcre | 8.40-r2 |
| Alpine 3.6 | pcre | 8.40-r2 |
| Alpine 3.7 | pcre | 8.40-r2 |
| Alpine 3.8 | pcre | 8.40-r2 |
| Alpine 3.9 | pcre | 8.40-r2 |
| Arch Linux | pcre | 8.41-1 |
| Arch Linux | pcre2 | 10.30-1 |
| Debian 12 | pcre2 | 10.22-3 |
| Debian 12 | pcre3 | 2:8.39-3 |
| Debian 13 | pcre2 | 10.22-3 |
| Debian 14 | pcre2 | 10.22-3 |
| SUSE HPE Helion OpenStack 8 | pcre | 8.45-8.7.1 |
| SUSE HPE Helion OpenStack 8 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise High Availability Extension 12 SP3 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP4 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP5 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server 12 SP3-BCL | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server 12 SP5 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP5 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | pcre | 8.45-8.7.1 |
| SUSE OpenStack Cloud 8 | pcre | 8.45-8.7.1 |
| SUSE OpenStack Cloud 8 | selinux-policy | 20140730-36.5.2 |
| SUSE OpenStack Cloud 9 | pcre | 8.45-8.7.1 |
| SUSE OpenStack Cloud 9 | selinux-policy | 20140730-36.5.2 |
| SUSE OpenStack Cloud Crowbar 8 | pcre | 8.45-8.7.1 |
| SUSE OpenStack Cloud Crowbar 8 | selinux-policy | 20140730-36.5.2 |
| SUSE OpenStack Cloud Crowbar 9 | pcre | 8.45-8.7.1 |
| SUSE OpenStack Cloud Crowbar 9 | selinux-policy | 20140730-36.5.2 |
| Ubuntu 16.04 LTS | pcre2 | no fix |
| Ubuntu Pro 16.04 LTS | pcre3 | 2:8.38-3.1ubuntu0.1~esm2 |