NVD Vulnerability Detail

CVE-2017-16231

Summary	In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report, noting that there are options that can be used to limit the amount of stack that is used
Publication Date	March 22, 2019, 12:59 a.m.
Registration Date	Jan. 26, 2021, 1:18 p.m.
Last Update	Nov. 21, 2024, 12:16 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:pcre:pcre:8.41:::::::*

Related information, measures and tools

No	URL	タグ
1	http://packetstormsecurity.com/files/150897/PCRE-8.41-Buffer-Overflow.html	Third Party Advisory VDB Entry
2	http://packetstormsecurity.com/files/150897/PCRE-8.41-Buffer-Overflow.html	Third Party Advisory VDB Entry
3	http://seclists.org/fulldisclosure/2018/Dec/33	Mailing List Third Party Advisory
4	http://seclists.org/fulldisclosure/2018/Dec/33	Mailing List Third Party Advisory
5	http://www.openwall.com/lists/oss-security/2017/11/01/11	Mailing List Third Party Advisory
6	http://www.openwall.com/lists/oss-security/2017/11/01/11	Mailing List Third Party Advisory
7	http://www.openwall.com/lists/oss-security/2017/11/01/3	Exploit Mailing List Third Party Advisory
8	http://www.openwall.com/lists/oss-security/2017/11/01/3	Exploit Mailing List Third Party Advisory
9	http://www.openwall.com/lists/oss-security/2017/11/01/7	Mailing List Third Party Advisory
10	http://www.openwall.com/lists/oss-security/2017/11/01/7	Mailing List Third Party Advisory
11	http://www.openwall.com/lists/oss-security/2017/11/01/8	Exploit Mailing List Third Party Advisory
12	http://www.openwall.com/lists/oss-security/2017/11/01/8	Exploit Mailing List Third Party Advisory
13	http://www.securityfocus.com/bid/101688	Third Party Advisory VDB Entry
14	http://www.securityfocus.com/bid/101688	Third Party Advisory VDB Entry
15	https://bugs.exim.org/show_bug.cgi?id=2047	Issue Tracking Third Party Advisory
16	https://bugs.exim.org/show_bug.cgi?id=2047	Issue Tracking Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

JVN Vulnerability Information

PCRE におけるバッファエラーの脆弱性

Title	PCRE におけるバッファエラーの脆弱性
Summary	未確定本件は、脆弱性として確定していません。 PCRE には、バッファエラーの脆弱性が存在します。ベンダは、本脆弱性に対して異議を唱えています。詳細については、以下の NVD の Current Description を確認してください。 https://nvd.nist.gov/vuln/detail/CVE-2017-16231
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Feb. 22, 2017, midnight
Registration Date	May 8, 2019, 5:05 p.m.
Last Update	May 8, 2019, 5:05 p.m.

Affected System

pcre.org

PCRE 8.41

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2017-16231	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16231
National Vulnerability Database (NVD)
2	CVE-2017-16231	https://nvd.nist.gov/vuln/detail/CVE-2017-16231

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
PCRE
1	Top Page	https://www.pcre.org/

その他

No	Name	URL
関連文書
1	Bugzilla - Bug 2047	https://bugs.exim.org/show_bug.cgi?id=2047

Change Log

No	Changed Details	Date of change
1	[2019年05月08日] 掲載	May 8, 2019, 5:05 p.m.