CVE-2017-7245
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in...
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file.
- Record
CVE-2017-7245- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file.
- Record
CVE-2017-7245- Updated
- 2026-11-02
EUVDEUVD-2017-16277 No score
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file.
- Record
EUVD-2017-16277- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c68h-v9j2-9jjh
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in...
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file.
- Record
GHSA-c68h-v9j2-9jjh- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSVALPINE-CVE-2017-7245
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file.
- Record
ALPINE-CVE-2017-7245- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file.
- Record
CVE-2017-7245- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVDEBIAN-CVE-2017-7245
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file.
- Record
DEBIAN-CVE-2017-7245- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2017-0454 No score
Updated pcre packages fix security vulnerabilities
The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled version) allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted regular expression (CVE-2017-6004).
A vulnerability was found in pcre caused by trying to find a Unicode property for a code value greater than 0x10ffff, the Unicode maximum, when running in non-UTF mode (where character values can be up to 0xffffffff) (CVE-2017-7186).
The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file (CVE-2017-7244).
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file (CVE-2017-7245).
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified other impact via a crafted file (CVE-2017-7246).
- Record
MGASA-2017-0454- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11153-1 No score
libpcre1-32bit-8.45-1.2 on GA media
These are all security issues fixed in the libpcre1-32bit-8.45-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11153-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:3652-1 No score
Security update for pcre
This update for pcre fixes the following issues:
Update pcre to version 8.45:
- CVE-2020-14155: Fixed integer overflow via a large number after a '(?C' substring (bsc#1172974).
- CVE-2019-20838: Fixed buffer over-read in JIT compiler (bsc#1172973).
- CVE-2017-7244: Fixed invalid read in _pcre32_xclass() (bsc#1030807).
- CVE-2017-7245: Fixed buffer overflow in the pcre32_copy_substring (bsc#1030805).
- CVE-2017-7246: Fixed another buffer overflow in the pcre32_copy_substring (bsc#1030803).
- CVE-2017-7186: Fixed denial of service caused by an invalid Unicode property lookup (bsc#1030066).
- CVE-2017-6004: Fixed denial of service via crafted regular expression (bsc#1025709).
- Record
SUSE-SU-2021:3652-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pcreAlpine:v3.6 |
before 8.41-r0 | 8.41-r0 |
pcre3Debian:12 |
All versions, plus listed versions 2:8.39-152:8.39-15.1 |
None known |
pcreMageia:5 |
before 8.41-1.mga5 | 8.41-1.mga5 |
pcreMageia:6 |
before 8.41-1.mga6 | 8.41-1.mga6 |
pcreSUSE:HPE Helion OpenStack 8 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:HPE Helion OpenStack 8 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:OpenStack Cloud 8 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:OpenStack Cloud 8 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:OpenStack Cloud 9 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:OpenStack Cloud 9 |
before 20140730-36.5.2 | 20140730-36.5.2 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
pcreSUSE:OpenStack Cloud Crowbar 8 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:OpenStack Cloud Crowbar 8 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:OpenStack Cloud Crowbar 9 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:OpenStack Cloud Crowbar 9 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise High Availability Extension 12 SP3 |
before 8.45-8.7.1 | 8.45-8.7.1 |
pcreSUSE:Linux Enterprise High Availability Extension 12 SP4 |
before 8.45-8.7.1 | 8.45-8.7.1 |
pcreSUSE:Linux Enterprise High Availability Extension 12 SP5 |
before 8.45-8.7.1 | 8.45-8.7.1 |
pcreSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Server 12 SP2-BCL |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Server 12 SP2-BCL |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Server 12 SP3-LTSS |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Server 12 SP3-BCL |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Server 12 SP3-BCL |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Server 12 SP4-LTSS |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Server 12 SP5 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Server 12 SP5 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 8.45-8.7.1 | 8.45-8.7.1 |
selinux-policySUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 20140730-36.5.2 | 20140730-36.5.2 |
pcreSUSE:Linux Enterprise Workstation Extension 12 SP5 |
before 8.45-8.7.1 | 8.45-8.7.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-7245 is a high vulnerability (CVSS 7.8) in Pcre, published March 23, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.37%, the 83rd percentile. Fixed in pcre 8.41-r0.
References
securityfocus.com/bid/97067
blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c
access.redhat.com/errata/RHSA-2018:2486
security.gentoo.org/glsa/201710-25
nvd.nist.gov/vuln/detail/CVE-2017-7245
github.com/advisories/GHSA-c68h-v9j2-9jjh
Show 23 moreShow less
security.alpinelinux.org/vuln/CVE-2017-7245
security-tracker.debian.org/tracker/CVE-2017-7245
advisories.mageia.org/MGASA-2017-0454.html
bugs.mageia.org/show_bug.cgi?id=20355
openwall.com/lists/oss-security/2017/03/24/1
lists.fedoraproject.org/archives/list/[email protected]/thread/ESZV6GLV63XBXTZQOAJPOWLRIG35TEV7
suse.com/support/update/announcement/2021/suse-su-20213652-1
bugzilla.suse.com/1025709