libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pcre-develUpgrade pcre-staticUpgrade pcre-utf32Upgrade pcre-cppUpgrade pcreUpgrade pcre-utf16 | May 4, 2022 | Jun 15, 2020 |
| Apple Osx Pcre | — | Upgrade macOS to the latest version | Nov 13, 2020 | Nov 12, 2020 |
| Apple Osx Screensharing | — | Upgrade macOS to the latest version | Feb 19, 2021 | Feb 1, 2021 |
| Centos_linux | — | Upgrade pcreUpgrade pcre-cpp-debuginfoUpgrade pcre-develUpgrade pcre-cppUpgrade pcre-utf32-debuginfoUpgrade pcre-tools-debuginfoUpgrade pcre-utf16-debuginfoUpgrade pcre-debuginfoUpgrade pcre-utf32Upgrade pcre-debugsourceUpgrade pcre-utf16 | Nov 10, 2021 | Jun 15, 2020 |
| Debian | — | No solution exists | May 15, 2025 | Jun 15, 2020 |
| Oracle_linux | — | Upgrade pcre-cppUpgrade pcreUpgrade pcre-staticUpgrade pcre-utf32Upgrade pcre-develUpgrade pcre-utf16 | Nov 17, 2021 | Jun 15, 2020 |
| Redhat_linux | — | Upgrade pcre-debugsourceUpgrade pcre-debuginfoUpgrade pcre-utf32Upgrade pcre-utf32-debuginfoUpgrade pcre-staticUpgrade pcre-utf16Upgrade pcreUpgrade pcre-develUpgrade pcre-tools-debuginfoUpgrade pcre-cpp-debuginfoUpgrade pcre-cppUpgrade pcre-utf16-debuginfo | Nov 10, 2021 | Jun 15, 2020 |
| Rocky_linux | — | Upgrade pcre-staticUpgrade pcre-cppUpgrade pcre-utf32Upgrade pcre-utf32-debuginfoUpgrade pcre-utf16-debuginfoUpgrade pcre-debuginfoUpgrade pcre-debugsourceUpgrade pcre-cpp-debuginfoUpgrade pcre-develUpgrade pcreUpgrade pcre-utf16 | Mar 12, 2024 | Jun 15, 2020 |
| Splunk | — | Upgrade Splunk Universal Forwarder to version 9.0.6Upgrade Splunk Universal Forwarder to version 8.2.12Upgrade Splunk Universal Forwarder to version 9.1.1Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.1.1 | Sep 30, 2025 | Jun 15, 2020 |
| Suse | — | Upgrade libpcre1Upgrade selinux-policy-develUpgrade pcre-docUpgrade libpcre16-0Upgrade selinux-policy-minimumUpgrade libpcre1-32bitUpgrade libpcreposix0-32bitUpgrade libpcrecpp0Upgrade libpcre16-0-32bitUpgrade libpcrecpp0-32bitUpgrade pcre-toolsUpgrade selinux-policyUpgrade pcre-devel-staticUpgrade libpcreposix0Upgrade pcre-devel | Oct 28, 2021 | Jun 15, 2020 |
| Ubuntu | — | Upgrade libpcre3 (Ubuntu Pro)Upgrade libpcre3 | May 18, 2022 | Jun 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub