Latest Pcre Vulnerabilities

● CVE-2022-41409

Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.

Pcre Pcre2<10.41

● CVE-2022-1586

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue i...

Pcre Pcre2<10.40

Fedoraproject Fedora=35

Fedoraproject Fedora=36

Redhat Enterprise Linux=8.0

Redhat Enterprise Linux=9.0

Netapp Active Iq Unified Manager Vmware Vsphere

and 13 more

● CVE-2022-1587

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular...

Pcre Pcre2<10.40

Redhat Enterprise Linux=9.0

Fedoraproject Fedora=35

Fedoraproject Fedora=36

Netapp Active Iq Unified Manager Vmware Vsphere

Netapp Hci Management Node

and 12 more

● CVE-2020-14155

PCRE. Multiple issues were addressed by updating to version 8.44.

IBM QRadar SIEM<=7.5.0 GA

IBM QRadar SIEM<=7.4.3 GA - 7.4.3 FP4

IBM QRadar SIEM<=7.3.3 GA - 7.3.3 FP10

Apple macOS Big Sur<11.2

Apple Catalina

Apple Mojave

and 39 more

● CVE-2019-20838

PCRE. Multiple issues were addressed by updating to version 8.44.

IBM QRadar SIEM<=7.5.0 GA

IBM QRadar SIEM<=7.4.3 GA - 7.4.3 FP4

IBM QRadar SIEM<=7.3.3 GA - 7.3.3 FP10

Pcre Pcre<8.43

Apple macOS<11.0.1

Apple macOS Big Sur<11.2

and 7 more

● CVE-2015-2326

The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular expression with a group conta...

Pcre Pcre<8.37

openSUSE openSUSE=13.1

openSUSE openSUSE=13.2

Mariadb Mariadb>=10.0.0<10.0.18

PHP PHP>=5.4.0<5.4.41

PHP PHP>=5.5.0<5.5.26

and 1 more

● CVE-2015-2325

The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unsp...

Pcre Pcre<8.37

openSUSE openSUSE=13.1

openSUSE openSUSE=13.2

Mariadb Mariadb<10.0.18

PHP PHP>=5.4.0<5.4.41

PHP PHP>=5.5.0<5.5.26

and 1 more

● CVE-2019-20454

A flaw was found in libpcre. A buffer overread in JIT mode when \X is used in non-UTF mode may cause application crash and denial of service. The flaw is in function do_extuni_no_utf() in pcre2_jit_co...

redhat/pcre2<0:10.32-2.el8

Pcre Pcre2>=10.31<10.34

Fedoraproject Fedora=31

redhat/pcre<10.34

Splunk Universal Forwarder>=8.2.0<8.2.12

Splunk Universal Forwarder>=9.0.0<9.0.6

and 1 more

● CVE-2017-16231

** DISPUTED ** In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute th...

Pcre Pcre=8.41

=8.41

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.