CVE-2017-7244
The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to...
The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.
- Record
CVE-2017-7244- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.
- Record
CVE-2017-7244- Updated
- 2026-11-02
EUVDEUVD-2017-16276 No score
The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.
- Record
EUVD-2017-16276- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2j3f-972q-6fv5
The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to...
The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.
- Record
GHSA-2j3f-972q-6fv5- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2017-7244
The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.
- Record
ALPINE-CVE-2017-7244- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.
- Record
CVE-2017-7244- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVDEBIAN-CVE-2017-7244
The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.
- Record
DEBIAN-CVE-2017-7244- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-7244
The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.
- Record
UBUNTU-CVE-2017-7244- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2017-0454 No score
Updated pcre packages fix security vulnerabilities
The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled version) allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted regular expression (CVE-2017-6004).
A vulnerability was found in pcre caused by trying to find a Unicode property for a code value greater than 0x10ffff, the Unicode maximum, when running in non-UTF mode (where character values can be up to 0xffffffff) (CVE-2017-7186).
The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file (CVE-2017-7244).
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file (CVE-2017-7245).
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified other impact via a crafted file (CVE-2017-7246).
- Record
MGASA-2017-0454- Updated
- 2026-11-02
OSVSUSE-SU-2021:3652-1 No score
Security update for pcre
This update for pcre fixes the following issues:
Update pcre to version 8.45:
- CVE-2020-14155: Fixed integer overflow via a large number after a '(?C' substring (bsc#1172974).
- CVE-2019-20838: Fixed buffer over-read in JIT compiler (bsc#1172973).
- CVE-2017-7244: Fixed invalid read in _pcre32_xclass() (bsc#1030807).
- CVE-2017-7245: Fixed buffer overflow in the pcre32_copy_substring (bsc#1030805).
- CVE-2017-7246: Fixed another buffer overflow in the pcre32_copy_substring (bsc#1030803).
- CVE-2017-7186: Fixed denial of service caused by an invalid Unicode property lookup (bsc#1030066).
- CVE-2017-6004: Fixed denial of service via crafted regular expression (bsc#1025709).
- Record
SUSE-SU-2021:3652-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pcreAlpine:v3.6 |
before 8.41-r0 | 8.41-r0 |
pcre3Debian:12 |
before 2:8.39-3 | 2:8.39-3 |
pcreMageia:5 |
before 8.41-1.mga5 | 8.41-1.mga5 |
pcreMageia:6 |
before 8.41-1.mga6 | 8.41-1.mga6 |
pcreSUSE:HPE Helion OpenStack 8 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:HPE Helion OpenStack 8 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:OpenStack Cloud 8 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:OpenStack Cloud 8 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:OpenStack Cloud 9 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:OpenStack Cloud 9 |
before 20140730-36.5.2 | 20140730-36.5.2 |
Show 27 moreShow less
| Package | Affected | Fixed |
|---|---|---|
pcreSUSE:OpenStack Cloud Crowbar 8 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:OpenStack Cloud Crowbar 8 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:OpenStack Cloud Crowbar 9 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:OpenStack Cloud Crowbar 9 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise High Availability Extension 12 SP3 |
before 8.45-8.7.1 | 8.45-8.7.1 |
pcreSUSE:Linux Enterprise High Availability Extension 12 SP4 |
before 8.45-8.7.1 | 8.45-8.7.1 |
pcreSUSE:Linux Enterprise High Availability Extension 12 SP5 |
before 8.45-8.7.1 | 8.45-8.7.1 |
pcreSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Server 12 SP2-BCL |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Server 12 SP2-BCL |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Server 12 SP3-LTSS |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Server 12 SP3-BCL |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Server 12 SP3-BCL |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Server 12 SP4-LTSS |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Server 12 SP5 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Server 12 SP5 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Workstation Extension 12 SP5 |
before 8.45-8.7.1 | 8.45-8.7.1 |
pcre3Ubuntu:Pro:16.04:LTS |
before 2:8.38-3.1ubuntu0.1~esm2, plus listed versions 2:8.35-7.1ubuntu12:8.38-1ubuntu12:8.38-32:8.38-3.12:8.38-3.1ubuntu0.1~esm1 |
2:8.38-3.1ubuntu0.1~esm2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-7244 is a medium vulnerability (CVSS 5.5) in Pcre, published March 23, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.99%, the 80th percentile. Fixed in pcre 8.41-r0.
References
securityfocus.com/bid/97067
blogs.gentoo.org/ago/2017/03/20/libpcre-invalid-memory-read-in-_pcre32_xclass-pcre_xclass-c
access.redhat.com/errata/RHSA-2018:2486
security.gentoo.org/glsa/201710-25
nvd.nist.gov/vuln/detail/CVE-2017-7244
github.com/advisories/GHSA-2j3f-972q-6fv5
Show 25 moreShow less
security.alpinelinux.org/vuln/CVE-2017-7244
security-tracker.debian.org/tracker/CVE-2017-7244
advisories.mageia.org/MGASA-2017-0454.html
bugs.mageia.org/show_bug.cgi?id=20355
openwall.com/lists/oss-security/2017/03/24/1
lists.fedoraproject.org/archives/list/[email protected]/thread/ESZV6GLV63XBXTZQOAJPOWLRIG35TEV7
suse.com/support/update/announcement/2021/suse-su-20213652-1
bugzilla.suse.com/1025709
ubuntu.com/security/CVE-2017-7244
cve.org/CVERecord?id=CVE-2017-7244