cve/2017/CVE-2017-6004.md
2024-05-26 14:27:05 +02:00

757 B

CVE-2017-6004

Description

The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled version) allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted regular expression.

POC

Reference

No PoCs from references.

Github