In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion     (uncontrolled recursion) when processing a crafted regular expression. (CVE-2017-11164)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the pcre package has been released.

- update to 2.56.x

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
220294	Linux Distros Unpatched Vulnerability : CVE-2017-11164	Nessus	Misc.	high
121872	Photon OS 1.0: Pcre PHSA-2018-1.0-0171	Nessus	PhotonOS Local Security Checks	high
120337	Fedora 28 : mingw-glib2 / mingw-glibmm24 (2018-3238d4da59)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2017-11164

high

Tenable Plugins

high

high

high