PT-2017-3310 · Php+1 · Pcre+1

Published 2017-11-01 · Updated 2017-11-28 · CVE-2017-13846

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13.1 PCRE versions prior to 8.40

Description The issue involves the third-party PCRE product and may allow remote attackers to cause a denial of service, such as an application crash, or possibly have other unspecified impacts.

Recommendations For macOS versions prior to 10.13.1, update to version 10.13.1 or later. For PCRE versions prior to 8.40, update to version 8.40 or later.

Fix

Related Identifiers

BDU:2018-00075

CVE-2017-13846

Affected Products

Pcre

Apple Macos

References · 5

• https://support.apple.com/HT208221 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00075 · Security Note
• https://osv.dev/vulnerability/CVE-2017-13846 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-13846 · Security Note
• http://securitytracker.com/id/1039710 · Note