The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled version) allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted regular expression.
References
Configurations
History
07 Nov 2023, 02:49
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2017-02-16 11:59
Updated : 2024-02-28 15:44
NVD link : CVE-2017-6004
Mitre link : CVE-2017-6004
CVE.ORG link : CVE-2017-6004
JSON object : View
Products Affected
pcre
- pcre
CWE
CWE-125
Out-of-bounds Read