PCRE2 10.23

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:pcre:pcre2:10.23:*:*:*:*:*:*:*

part: a version: 10.23 update: *

VendorPcre (c96197c6-de56-5934-93d0-fa914c0595fc)
ProductPcre2 (a51e412c-eb57-580c-be50-136e0313b616)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/pcre2 purl2cpe 2026-06-01 10:11:36.511501
pkg:deb/ubuntu/pcre2 purl2cpe 2026-06-01 10:11:36.511502
pkg:gem/pcre2 purl2cpe 2026-06-01 10:11:36.511504
pkg:github/philiphazel/pcre2 purl2cpe 2026-06-01 10:11:36.511505
pkg:gitlab/redhat/pcre2 purl2cpe 2026-06-01 10:11:36.511506
pkg:npm/pcre2 purl2cpe 2026-06-01 10:11:36.511508
pkg:pypi/python-pcre purl2cpe 2026-06-01 10:11:36.511509
pkg:rpm/fedora/pcre2 purl2cpe 2026-06-01 10:11:36.511511
pkg:rpm/opensuse/pcre2 purl2cpe 2026-06-01 10:11:36.511512

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-8786 vulnerable 2026-06-08 05:10:08.899411 Details available
pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression.
Published: 2017-05-05T00:00:00.000Z
Updated: 2024-08-05T16:48:22.018Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7186 vulnerable 2026-06-08 05:09:55.439038 Details available
libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode property lookup.
Published: 2017-03-20T00:00:00.000Z
Updated: 2024-08-05T15:56:36.034Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.