libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pcre-cppUpgrade pcre-utf32Upgrade pcre-staticUpgrade pcre-develUpgrade pcre-utf16Upgrade pcre | May 4, 2022 | Jun 15, 2020 |
| Apple Osx Pcre | — | Upgrade macOS to the latest version | Nov 13, 2020 | Jun 15, 2020 |
| Apple Osx Screensharing | — | Upgrade macOS to the latest version | Feb 19, 2021 | Jun 15, 2020 |
| Centos_linux | — | Upgrade pcre-tools-debuginfoUpgrade pcre-utf32-debuginfoUpgrade pcreUpgrade pcre-develUpgrade pcre-cpp-debuginfoUpgrade pcre-cppUpgrade pcre-utf16Upgrade pcre-debugsourceUpgrade pcre-utf32Upgrade pcre-utf16-debuginfoUpgrade pcre-debuginfo | Nov 10, 2021 | Jun 15, 2020 |
| Debian | — | No solution exists | May 15, 2025 | Jun 15, 2020 |
| Oracle_linux | — | Upgrade pcre-staticUpgrade pcreUpgrade pcre-cppUpgrade pcre-utf32Upgrade pcre-develUpgrade pcre-utf16 | Nov 17, 2021 | Jun 15, 2020 |
| Redhat_linux | — | Upgrade pcre-debugsourceUpgrade pcre-staticUpgrade pcre-utf32Upgrade pcre-debuginfoUpgrade pcre-utf16Upgrade pcre-utf32-debuginfoUpgrade pcre-tools-debuginfoUpgrade pcre-cpp-debuginfoUpgrade pcre-cppUpgrade pcreUpgrade pcre-develUpgrade pcre-utf16-debuginfo | Nov 10, 2021 | Jun 15, 2020 |
| Rocky_linux | — | Upgrade pcre-utf16-debuginfoUpgrade pcre-staticUpgrade pcre-utf32-debuginfoUpgrade pcre-utf32Upgrade pcre-cppUpgrade pcre-develUpgrade pcre-utf16Upgrade pcre-cpp-debuginfoUpgrade pcre-debugsourceUpgrade pcreUpgrade pcre-debuginfo | Mar 12, 2024 | Jun 15, 2020 |
| Splunk | — | Upgrade Splunk Universal Forwarder to version 8.2.12Upgrade Splunk Universal Forwarder to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Universal Forwarder to version 9.1.1 | Sep 30, 2025 | Jun 15, 2020 |
| Suse | — | Upgrade libpcrecpp0-32bitUpgrade pcre-toolsUpgrade pcre-develUpgrade pcre-devel-staticUpgrade libpcrecpp0Upgrade libpcreposix0Upgrade selinux-policyUpgrade libpcre16-0-32bitUpgrade libpcreposix0-32bitUpgrade pcre-docUpgrade selinux-policy-develUpgrade libpcre1-32bitUpgrade libpcre1Upgrade selinux-policy-minimumUpgrade libpcre16-0 | Oct 28, 2021 | Jun 15, 2020 |
| Ubuntu | — | Upgrade libpcre3 (Ubuntu Pro)Upgrade libpcre3 | May 18, 2022 | Jun 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub