Approved changes feed: RSS · Atom

cpe:2.3:a:pcre:pcre:8.41:*:*:*:*:*:*:*

part: a version: 8.41 update: *

VendorPcre (c96197c6-de56-5934-93d0-fa914c0595fc)
ProductPcre (64f36098-5157-54ce-af33-7a8a5c7bd1ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:cpan/pcre purl2cpe 2026-06-01 10:11:36.472712
pkg:github/luvit/pcre purl2cpe 2026-06-01 10:11:36.472713
pkg:gitlab/redhat/pcre purl2cpe 2026-06-01 10:11:36.472715
pkg:rpm/fedora/pcre purl2cpe 2026-06-01 10:11:36.472716
pkg:sourceforge/pcre purl2cpe 2026-06-01 10:11:36.472717

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-16231 vulnerable 2026-06-08 05:09:00.269137 Details available
In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report, noting that there are options that can be used to limit the amount of stack that is used
Published: 2019-03-17T16:24:52.000Z
Updated: 2024-08-05T20:20:05.401Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11164 vulnerable 2026-06-08 05:08:36.947482 Details available
In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression.
Published: 2017-07-11T00:00:00.000Z
Updated: 2024-08-05T17:57:57.662Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.