{"id":"CVE-2017-8786","details":"pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression.","modified":"2026-07-08T11:36:32.883816Z","published":"2017-05-05T00:29:00.213Z","related":["openSUSE-SU-2024:11154-1"],"references":[{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201710-09"},{"type":"REPORT","url":"https://bugs.exim.org/show_bug.cgi?id=2079"},{"type":"FIX","url":"https://blogs.gentoo.org/ago/2017/04/29/libpcre-heap-based-buffer-overflow-write-in-pcre2test-c/"},{"type":"FIX","url":"https://vcs.pcre.org/pcre2?view=revision&revision=696"},{"type":"FIX","url":"https://vcs.pcre.org/pcre2?view=revision&revision=697"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/pcre2project/pcre2","events":[{"introduced":"08f2a603e8ab886d1074f6ebab787f0ab05f1c2e"},{"last_affected":"08f2a603e8ab886d1074f6ebab787f0ab05f1c2e"}],"database_specific":{"cpe":"cpe:2.3:a:pcre:pcre2:10.23:*:*:*:*:*:*:*","extracted_events":[{"introduced":"10.23"},{"last_affected":"10.23"}],"source":"CPE_STRING"}}],"versions":["10.23","pcre2-10.23"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-8786.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}