CVE-2017-16231: Buffer Overflow
DISPUTED In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcreexec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report, noting that there are options that can be used to limit the amount of stack that is used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16231?
The severity of CVE-2017-16231 is medium with a severity value of 5.5.
What is the affected software of CVE-2017-16231?
The affected software of CVE-2017-16231 is PCRE version 8.41.
How does CVE-2017-16231 occur?
CVE-2017-16231 occurs due to a crash overflow in the function match() in pcre_exec.c, caused by a self-recursive call.
Is CVE-2017-16231 disputed?
Yes, CVE-2017-16231 is disputed by third parties who argue that there are options available to limit the impact.
Are there any references available for CVE-2017-16231?
Yes, there are references available for CVE-2017-16231 which include: http://packetstormsecurity.com/files/150897/PCRE-8.41-Buffer-Overflow.html, http://seclists.org/fulldisclosure/2018/Dec/33, and http://www.openwall.com/lists/oss-security/2017/11/01/11.