GCVE - cpe:2.3:a:pcre:pcre:8.40:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:pcre:pcre:8.40:*:*:*:*:*:*:*

part: a version: 8.40 update: *

Vendor	Pcre (`c96197c6-de56-5934-93d0-fa914c0595fc`)
Product	Pcre (`64f36098-5157-54ce-af33-7a8a5c7bd1ed`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:cpan/pcre`	purl2cpe	2026-06-01 10:11:36.472705
`pkg:github/luvit/pcre`	purl2cpe	2026-06-01 10:11:36.472707
`pkg:gitlab/redhat/pcre`	purl2cpe	2026-06-01 10:11:36.472708
`pkg:rpm/fedora/pcre`	purl2cpe	2026-06-01 10:11:36.472709
`pkg:sourceforge/pcre`	purl2cpe	2026-06-01 10:11:36.472711

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-7246`	vulnerable	2026-06-08 05:09:55.556111	Details available Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified other impact via a crafted file. Published: 2017-03-23T21:00:00.000Z Updated: 2024-08-05T15:56:36.170Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/97067 https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/ https://access.redhat.com/errata/RHSA-2018:2486 https://security.gentoo.org/glsa/201710-25	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7245`	vulnerable	2026-06-08 05:09:55.555672	Details available Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file. Published: 2017-03-23T21:00:00.000Z Updated: 2024-08-05T15:56:36.004Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/97067 https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/ https://access.redhat.com/errata/RHSA-2018:2486 https://security.gentoo.org/glsa/201710-25	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7244`	vulnerable	2026-06-08 05:09:55.555315	Details available The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file. Published: 2017-03-23T21:00:00.000Z Updated: 2024-08-05T15:56:36.394Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/97067 https://blogs.gentoo.org/ago/2017/03/20/libpcre-invalid-memory-read-in-_pcre32_xclass-pcre_xclass-c/ https://access.redhat.com/errata/RHSA-2018:2486 https://security.gentoo.org/glsa/201710-25	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7186`	vulnerable	2026-06-08 05:09:55.438478	Details available libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode property lookup. Published: 2017-03-20T00:00:00.000Z Updated: 2024-08-05T15:56:36.034Z Open on db.gcve.eu Reference links https://bugs.exim.org/show_bug.cgi?id=2052 https://security.gentoo.org/glsa/201710-09 https://vcs.pcre.org/pcre/code/trunk/pcre_internal.h?r1=1649&r2=1688&sortby=date https://vcs.pcre.org/pcre2/code/trunk/src/pcre2_internal.h?r1=600&r2=670&sortby=date https://vcs.pcre.org/pcre/code/trunk/pcre_ucd.c?r1=1490&r2=1688&sortby=date	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.