CVE

Id
104006  
CVE No.
CVE-2017-7186  
Status
Candidate  
Description
libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode property lookup.  
Phase
Assigned (20170319)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
806961 104006 CVE-2017-7186 MISC:https://blogs.gentoo.org/ago/2017/03/14/libpcre-invalid-memory-read-in-match-pcre_exec-c/  View
806962 104006 CVE-2017-7186 CONFIRM:https://bugs.exim.org/show_bug.cgi?id=2052  View
806963 104006 CVE-2017-7186 CONFIRM:https://vcs.pcre.org/pcre/code/trunk/pcre_internal.h?r1=1649&r2=1688&sortby=date  View
806964 104006 CVE-2017-7186 CONFIRM:https://vcs.pcre.org/pcre/code/trunk/pcre_ucd.c?r1=1490&r2=1688&sortby=date  View
806965 104006 CVE-2017-7186 CONFIRM:https://vcs.pcre.org/pcre2/code/trunk/src/pcre2_internal.h?r1=600&r2=670&sortby=date  View
806966 104006 CVE-2017-7186 CONFIRM:https://vcs.pcre.org/pcre2/code/trunk/src/pcre2_ucd.c?r1=316&r2=670&sortby=date  View
806967 104006 CVE-2017-7186 BID:97030  View

Related JVN