CVE-2017-7246
Fixed in a distro release EPSS 3%
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified other impact via a crafted file.
Products: pcre
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.6 | pcre | 8.41-r0 |
| Arch Linux | pcre | 8.41-1 |
| Debian 12 | pcre3 | no fix |
| SUSE HPE Helion OpenStack 8 | pcre | 8.45-8.7.1 |
| SUSE HPE Helion OpenStack 8 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise High Availability Extension 12 SP3 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP4 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP5 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server 12 SP3-BCL | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server 12 SP5 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server 12 SP5 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | pcre | 8.45-8.7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | selinux-policy | 20140730-36.5.2 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | pcre | 8.45-8.7.1 |
| SUSE OpenStack Cloud 8 | pcre | 8.45-8.7.1 |
| SUSE OpenStack Cloud 8 | selinux-policy | 20140730-36.5.2 |
| SUSE OpenStack Cloud 9 | pcre | 8.45-8.7.1 |
| SUSE OpenStack Cloud 9 | selinux-policy | 20140730-36.5.2 |
| SUSE OpenStack Cloud Crowbar 8 | pcre | 8.45-8.7.1 |
| SUSE OpenStack Cloud Crowbar 8 | selinux-policy | 20140730-36.5.2 |
| SUSE OpenStack Cloud Crowbar 9 | pcre | 8.45-8.7.1 |
| SUSE OpenStack Cloud Crowbar 9 | selinux-policy | 20140730-36.5.2 |