suse · CVE-2017-7244

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-7244 severity moderate: SUSE including 296 source package names (24.324:libpcre1-8.45-8.7.1, 26.374:libpcre1-8.45-8.7.1, …), 733 product×package rows across 110 product lines (Container suse/ltss/sle12.5/sles12sp5, Container suse/sles12sp3, … (110 product lines)): Fixed 271, Known Affected 231, Known Not Affected 231.

Description:

The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.