An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-apcu-panelalma-upgrade-libzipalma-upgrade-libzip-develalma-upgrade-libzip-toolsalma-upgrade-pcre2alma-upgrade-pcre2-develalma-upgrade-pcre2-toolsalma-upgrade-pcre2-utf16alma-upgrade-pcre2-utf32alma-upgrade-phpalma-upgrade-php-bcmathalma-upgrade-php-clialma-upgrade-php-commonalma-upgrade-php-dbaalma-upgrade-php-dbgalma-upgrade-php-develalma-upgrade-php-embeddedalma-upgrade-php-enchantalma-upgrade-php-fpmalma-upgrade-php-gdalma-upgrade-php-gmpalma-upgrade-php-intlalma-upgrade-php-jsonalma-upgrade-php-ldapalma-upgrade-php-mbstringalma-upgrade-php-mysqlndalma-upgrade-php-odbcalma-upgrade-php-opcachealma-upgrade-php-pdoalma-upgrade-php-pearalma-upgrade-php-pecl-apcualma-upgrade-php-pecl-apcu-develalma-upgrade-php-pecl-rrdalma-upgrade-php-pecl-xdebugalma-upgrade-php-pecl-zipalma-upgrade-php-pgsqlalma-upgrade-php-processalma-upgrade-php-recodealma-upgrade-php-snmpalma-upgrade-php-soapalma-upgrade-php-xmlalma-upgrade-php-xmlrpc | May 4, 2022 | Feb 14, 2020 | |
| Centos_linux | — | centos-upgrade-apcu-panelcentos-upgrade-libzipcentos-upgrade-libzip-debuginfocentos-upgrade-libzip-debugsourcecentos-upgrade-libzip-develcentos-upgrade-libzip-toolscentos-upgrade-libzip-tools-debuginfocentos-upgrade-pcre2centos-upgrade-pcre2-debuginfocentos-upgrade-pcre2-debugsourcecentos-upgrade-pcre2-develcentos-upgrade-pcre2-tools-debuginfocentos-upgrade-pcre2-utf16centos-upgrade-pcre2-utf16-debuginfocentos-upgrade-pcre2-utf32centos-upgrade-pcre2-utf32-debuginfocentos-upgrade-phpcentos-upgrade-php-bcmathcentos-upgrade-php-bcmath-debuginfocentos-upgrade-php-clicentos-upgrade-php-cli-debuginfocentos-upgrade-php-commoncentos-upgrade-php-common-debuginfocentos-upgrade-php-dbacentos-upgrade-php-dba-debuginfocentos-upgrade-php-dbgcentos-upgrade-php-dbg-debuginfocentos-upgrade-php-debuginfocentos-upgrade-php-debugsourcecentos-upgrade-php-develcentos-upgrade-php-embeddedcentos-upgrade-php-embedded-debuginfocentos-upgrade-php-enchantcentos-upgrade-php-enchant-debuginfocentos-upgrade-php-fpmcentos-upgrade-php-fpm-debuginfocentos-upgrade-php-gdcentos-upgrade-php-gd-debuginfocentos-upgrade-php-gmpcentos-upgrade-php-gmp-debuginfocentos-upgrade-php-intlcentos-upgrade-php-intl-debuginfocentos-upgrade-php-jsoncentos-upgrade-php-json-debuginfocentos-upgrade-php-ldapcentos-upgrade-php-ldap-debuginfocentos-upgrade-php-mbstringcentos-upgrade-php-mbstring-debuginfocentos-upgrade-php-mysqlndcentos-upgrade-php-mysqlnd-debuginfocentos-upgrade-php-odbccentos-upgrade-php-odbc-debuginfocentos-upgrade-php-opcachecentos-upgrade-php-opcache-debuginfocentos-upgrade-php-pdocentos-upgrade-php-pdo-debuginfocentos-upgrade-php-pearcentos-upgrade-php-pecl-apcucentos-upgrade-php-pecl-apcu-debuginfocentos-upgrade-php-pecl-apcu-debugsourcecentos-upgrade-php-pecl-apcu-develcentos-upgrade-php-pecl-rrdcentos-upgrade-php-pecl-rrd-debuginfocentos-upgrade-php-pecl-rrd-debugsourcecentos-upgrade-php-pecl-xdebugcentos-upgrade-php-pecl-xdebug-debuginfocentos-upgrade-php-pecl-xdebug-debugsourcecentos-upgrade-php-pecl-zipcentos-upgrade-php-pecl-zip-debuginfocentos-upgrade-php-pecl-zip-debugsourcecentos-upgrade-php-pgsqlcentos-upgrade-php-pgsql-debuginfocentos-upgrade-php-processcentos-upgrade-php-process-debuginfocentos-upgrade-php-recodecentos-upgrade-php-recode-debuginfocentos-upgrade-php-snmpcentos-upgrade-php-snmp-debuginfocentos-upgrade-php-soapcentos-upgrade-php-soap-debuginfocentos-upgrade-php-xmlcentos-upgrade-php-xml-debuginfocentos-upgrade-php-xmlrpccentos-upgrade-php-xmlrpc-debuginfo | Sep 9, 2020 | Feb 14, 2020 |
| Debian | debian-upgrade-pcre2 | Mar 17, 2023 | Feb 14, 2020 | |
| Dell Powerstore Dsa2023129 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Apr 4, 2023 | |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-net-libs-pcre2 | Jun 16, 2020 | Feb 14, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-pcre2huawei-euleros-2_0_sp8-upgrade-pcre2-develhuawei-euleros-2_0_sp8-upgrade-pcre2-utf16huawei-euleros-2_0_sp8-upgrade-pcre2-utf32 | Apr 21, 2020 | Feb 14, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-pcre2-10-34-11-4-21-0-1-69-0 | Jan 19, 2021 | Feb 14, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-apcu-paneloracle-linux-upgrade-libziporacle-linux-upgrade-libzip-develoracle-linux-upgrade-libzip-toolsoracle-linux-upgrade-pcre2oracle-linux-upgrade-pcre2-develoracle-linux-upgrade-pcre2-toolsoracle-linux-upgrade-pcre2-utf16oracle-linux-upgrade-pcre2-utf32oracle-linux-upgrade-phporacle-linux-upgrade-php-bcmathoracle-linux-upgrade-php-clioracle-linux-upgrade-php-commonoracle-linux-upgrade-php-dbaoracle-linux-upgrade-php-dbgoracle-linux-upgrade-php-develoracle-linux-upgrade-php-embeddedoracle-linux-upgrade-php-enchantoracle-linux-upgrade-php-fpmoracle-linux-upgrade-php-gdoracle-linux-upgrade-php-gmporacle-linux-upgrade-php-intloracle-linux-upgrade-php-jsonoracle-linux-upgrade-php-ldaporacle-linux-upgrade-php-mbstringoracle-linux-upgrade-php-mysqlndoracle-linux-upgrade-php-odbcoracle-linux-upgrade-php-opcacheoracle-linux-upgrade-php-pdooracle-linux-upgrade-php-pearoracle-linux-upgrade-php-pecl-apcuoracle-linux-upgrade-php-pecl-apcu-develoracle-linux-upgrade-php-pecl-rrdoracle-linux-upgrade-php-pecl-xdebugoracle-linux-upgrade-php-pecl-ziporacle-linux-upgrade-php-pgsqloracle-linux-upgrade-php-processoracle-linux-upgrade-php-recodeoracle-linux-upgrade-php-snmporacle-linux-upgrade-php-soaporacle-linux-upgrade-php-xmloracle-linux-upgrade-php-xmlrpc | Sep 10, 2020 | Jul 28, 2019 |
| Redhat_linux | redhat-upgrade-apcu-panelredhat-upgrade-libzipredhat-upgrade-libzip-debuginforedhat-upgrade-libzip-debugsourceredhat-upgrade-libzip-develredhat-upgrade-libzip-toolsredhat-upgrade-libzip-tools-debuginforedhat-upgrade-pcre2redhat-upgrade-pcre2-debuginforedhat-upgrade-pcre2-debugsourceredhat-upgrade-pcre2-develredhat-upgrade-pcre2-toolsredhat-upgrade-pcre2-tools-debuginforedhat-upgrade-pcre2-utf16redhat-upgrade-pcre2-utf16-debuginforedhat-upgrade-pcre2-utf32redhat-upgrade-pcre2-utf32-debuginforedhat-upgrade-phpredhat-upgrade-php-bcmathredhat-upgrade-php-bcmath-debuginforedhat-upgrade-php-cliredhat-upgrade-php-cli-debuginforedhat-upgrade-php-commonredhat-upgrade-php-common-debuginforedhat-upgrade-php-dbaredhat-upgrade-php-dba-debuginforedhat-upgrade-php-dbgredhat-upgrade-php-dbg-debuginforedhat-upgrade-php-debuginforedhat-upgrade-php-debugsourceredhat-upgrade-php-develredhat-upgrade-php-embeddedredhat-upgrade-php-embedded-debuginforedhat-upgrade-php-enchantredhat-upgrade-php-enchant-debuginforedhat-upgrade-php-fpmredhat-upgrade-php-fpm-debuginforedhat-upgrade-php-gdredhat-upgrade-php-gd-debuginforedhat-upgrade-php-gmpredhat-upgrade-php-gmp-debuginforedhat-upgrade-php-intlredhat-upgrade-php-intl-debuginforedhat-upgrade-php-jsonredhat-upgrade-php-json-debuginforedhat-upgrade-php-ldapredhat-upgrade-php-ldap-debuginforedhat-upgrade-php-mbstringredhat-upgrade-php-mbstring-debuginforedhat-upgrade-php-mysqlndredhat-upgrade-php-mysqlnd-debuginforedhat-upgrade-php-odbcredhat-upgrade-php-odbc-debuginforedhat-upgrade-php-opcacheredhat-upgrade-php-opcache-debuginforedhat-upgrade-php-pdoredhat-upgrade-php-pdo-debuginforedhat-upgrade-php-pearredhat-upgrade-php-pecl-apcuredhat-upgrade-php-pecl-apcu-debuginforedhat-upgrade-php-pecl-apcu-debugsourceredhat-upgrade-php-pecl-apcu-develredhat-upgrade-php-pecl-rrdredhat-upgrade-php-pecl-rrd-debuginforedhat-upgrade-php-pecl-rrd-debugsourceredhat-upgrade-php-pecl-xdebugredhat-upgrade-php-pecl-xdebug-debuginforedhat-upgrade-php-pecl-xdebug-debugsourceredhat-upgrade-php-pecl-zipredhat-upgrade-php-pecl-zip-debuginforedhat-upgrade-php-pecl-zip-debugsourceredhat-upgrade-php-pgsqlredhat-upgrade-php-pgsql-debuginforedhat-upgrade-php-processredhat-upgrade-php-process-debuginforedhat-upgrade-php-recoderedhat-upgrade-php-recode-debuginforedhat-upgrade-php-snmpredhat-upgrade-php-snmp-debuginforedhat-upgrade-php-soapredhat-upgrade-php-soap-debuginforedhat-upgrade-php-xmlredhat-upgrade-php-xml-debuginforedhat-upgrade-php-xmlrpcredhat-upgrade-php-xmlrpc-debuginfo | Sep 9, 2020 | Feb 14, 2020 | |
| Rocky_linux | rocky-upgrade-libziprocky-upgrade-libzip-debuginforocky-upgrade-libzip-debugsourcerocky-upgrade-libzip-develrocky-upgrade-libzip-toolsrocky-upgrade-libzip-tools-debuginforocky-upgrade-pcre2rocky-upgrade-pcre2-debuginforocky-upgrade-pcre2-debugsourcerocky-upgrade-pcre2-develrocky-upgrade-pcre2-toolsrocky-upgrade-pcre2-tools-debuginforocky-upgrade-pcre2-utf16rocky-upgrade-pcre2-utf16-debuginforocky-upgrade-pcre2-utf32rocky-upgrade-pcre2-utf32-debuginforocky-upgrade-phprocky-upgrade-php-bcmathrocky-upgrade-php-bcmath-debuginforocky-upgrade-php-clirocky-upgrade-php-cli-debuginforocky-upgrade-php-commonrocky-upgrade-php-common-debuginforocky-upgrade-php-dbarocky-upgrade-php-dba-debuginforocky-upgrade-php-dbgrocky-upgrade-php-dbg-debuginforocky-upgrade-php-debuginforocky-upgrade-php-debugsourcerocky-upgrade-php-develrocky-upgrade-php-embeddedrocky-upgrade-php-embedded-debuginforocky-upgrade-php-enchantrocky-upgrade-php-enchant-debuginforocky-upgrade-php-fpmrocky-upgrade-php-fpm-debuginforocky-upgrade-php-gdrocky-upgrade-php-gd-debuginforocky-upgrade-php-gmprocky-upgrade-php-gmp-debuginforocky-upgrade-php-intlrocky-upgrade-php-intl-debuginforocky-upgrade-php-jsonrocky-upgrade-php-json-debuginforocky-upgrade-php-ldaprocky-upgrade-php-ldap-debuginforocky-upgrade-php-mbstringrocky-upgrade-php-mbstring-debuginforocky-upgrade-php-mysqlndrocky-upgrade-php-mysqlnd-debuginforocky-upgrade-php-odbcrocky-upgrade-php-odbc-debuginforocky-upgrade-php-opcacherocky-upgrade-php-opcache-debuginforocky-upgrade-php-pdorocky-upgrade-php-pdo-debuginforocky-upgrade-php-pecl-apcurocky-upgrade-php-pecl-apcu-debuginforocky-upgrade-php-pecl-apcu-debugsourcerocky-upgrade-php-pecl-apcu-develrocky-upgrade-php-pecl-rrdrocky-upgrade-php-pecl-rrd-debuginforocky-upgrade-php-pecl-rrd-debugsourcerocky-upgrade-php-pecl-xdebugrocky-upgrade-php-pecl-xdebug-debuginforocky-upgrade-php-pecl-xdebug-debugsourcerocky-upgrade-php-pecl-ziprocky-upgrade-php-pecl-zip-debuginforocky-upgrade-php-pecl-zip-debugsourcerocky-upgrade-php-pgsqlrocky-upgrade-php-pgsql-debuginforocky-upgrade-php-processrocky-upgrade-php-process-debuginforocky-upgrade-php-recoderocky-upgrade-php-recode-debuginforocky-upgrade-php-snmprocky-upgrade-php-snmp-debuginforocky-upgrade-php-soaprocky-upgrade-php-soap-debuginforocky-upgrade-php-xmlrocky-upgrade-php-xml-debuginforocky-upgrade-php-xmlrpcrocky-upgrade-php-xmlrpc-debuginfo | Mar 12, 2024 | Feb 14, 2020 | |
| Splunk | splunk-upgrade-latest | Sep 30, 2025 | Feb 14, 2020 | |
| Suse | — | suse-upgrade-libpcre2-16-0suse-upgrade-libpcre2-16-0-32bitsuse-upgrade-libpcre2-32-0suse-upgrade-libpcre2-32-0-32bitsuse-upgrade-libpcre2-8-0suse-upgrade-libpcre2-8-0-32bitsuse-upgrade-libpcre2-posix2suse-upgrade-libpcre2-posix2-32bitsuse-upgrade-pcre2-develsuse-upgrade-pcre2-devel-staticsuse-upgrade-pcre2-docsuse-upgrade-pcre2-tools | Aug 9, 2024 | Feb 14, 2020 |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Feb 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub