CVE-2017-11164: In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontro...

Security readout for executives and security teams

CVE-2017-11164 is an availability risk in PCRE 8.41. A crafted regular expression can trigger uncontrolled recursion and exhaust the stack, potentially crashing software that processes such patterns. The provided sources do not name affected downstream products, active exploitation, CVSS score, or a vendor fix. Exposure is most likely where PCRE 8.41 is directly used or bundled and where users, tenants, rules, or integrations can supply regular expressions for server-side processing. Treat this as a targeted availability exposure review, not an emergency patch event based on current evidence. Prioritize systems that process customer-supplied patterns or run critical services with PCRE 8.41. Mitigation focus: Inventory applications and dependencies that embed or link PCRE 8.41.; Check upstream PCRE and product vendor guidance for fixed or recommended versions.; Restrict untrusted users from submitting arbitrary regular expressions where possible..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.