REDHAT-BUG-1848444
First published: Thu Jun 18 2020(Updated: )
A vulnerability was found in libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to <a href="https://access.redhat.com/security/cve/CVE-2019-20454">CVE-2019-20454</a>. References: <a href="https://bugs.gentoo.org/717920">https://bugs.gentoo.org/717920</a> <a href="https://www.pcre.org/original/changelog.txt">https://www.pcre.org/original/changelog.txt</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/pcre | <8.43 | 8.43 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2019-20454
- https://bugs.gentoo.org/717920
- https://www.pcre.org/original/changelog.txt
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1848446
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1848445
- https://vcs.pcre.org/pcre?view=revision&revision=1740
- https://bugs.exim.org/show_bug.cgi?id=2320
- https://access.redhat.com/errata/RHSA-2021:4373
- https://access.redhat.com/errata/RHSA-2021:4613
- https://access.redhat.com/errata/RHSA-2021:4614
- https://bugzilla.redhat.com/show_bug.cgi?id=1848444
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/tags
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-20838
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/trending
- package-manager/redhat