CVE-2017-16231

In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report, noting that there are options that can be used to limit the amount of stack that is used

• CWE-119
• CWE-119

• http://packetstormsecurity.com/files/150897/PCRE-8.41-Buffer-Overflow.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Dec/33Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/01/11Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/01/3Exploit, Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/01/7Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/01/8Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/101688Third Party Advisory, VDB Entry
• https://bugs.exim.org/show_bug.cgi?id=2047Issue Tracking, Third Party Advisory
• http://packetstormsecurity.com/files/150897/PCRE-8.41-Buffer-Overflow.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Dec/33Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/01/11Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/01/3Exploit, Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/01/7Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/01/8Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/101688Third Party Advisory, VDB Entry
• https://bugs.exim.org/show_bug.cgi?id=2047Issue Tracking, Third Party Advisory

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16226The static-eval module is intended to evaluate statically-an…
• CVE-2017-16227The aspath_put function in bgpd/bgp_aspath.c in Quagga befor…
• CVE-2017-16228Dulwich before 0.18.5, when an SSH subprocess is used, allow…
• CVE-2017-16229In the Ox gem 2.8.1 for Ruby, the process crashes with a sta…
• CVE-2017-1623IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting…
• CVE-2017-16230In admin/write-post.php in Typecho through 1.1, one can log …
• CVE-2017-16232LibTIFF 4.0.8 has multiple memory leak vulnerabilities, whic…
• CVE-2017-16237In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file…
• CVE-2017-16239In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 1…
• CVE-2017-1624IBM QRadar 7.3 and 7.3.1 specifies permissions for a securit…4.2
• CVE-2017-16241Incorrect access control in AMAG Symmetry Door Edge Network …
• CVE-2017-16242An issue was discovered on MECO USB Memory Stick with Finger…