CVE-2017-6004

Name of the Vulnerable Software and Affected Versions PCRE versions prior to revision 1680 PCRE versions 8.x and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, via a crafted regular expression. This is due to a problem in the compile bracket matchingpath function in pcre jit compile.c.

Recommendations For PCRE versions prior to revision 1680, update to a version that includes the fix for this issue. For PCRE versions 8.x and earlier, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting the use of crafted regular expressions to minimize the risk of exploitation.