libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pcre-develUpgrade pcre-utf32Upgrade pcre-cppUpgrade pcre-staticUpgrade pcre-utf16Upgrade pcre | May 4, 2022 | Jun 15, 2020 |
| Apple Osx Pcre | — | Upgrade macOS to the latest version | Nov 13, 2020 | Nov 12, 2020 |
| Apple Osx Screensharing | — | Upgrade macOS to the latest version | Feb 19, 2021 | Feb 1, 2021 |
| Centos_linux | — | Upgrade pcre-utf16Upgrade pcre-utf32Upgrade pcre-debugsourceUpgrade pcre-utf16-debuginfoUpgrade pcre-debuginfoUpgrade pcre-develUpgrade pcre-utf32-debuginfoUpgrade pcre-cpp-debuginfoUpgrade pcreUpgrade pcre-tools-debuginfoUpgrade pcre-cpp | Nov 10, 2021 | Jun 15, 2020 |
| Debian | — | No solution exists | May 15, 2025 | Jun 15, 2020 |
| Oracle_linux | — | Upgrade pcre-utf16Upgrade pcre-utf32Upgrade pcre-develUpgrade pcreUpgrade pcre-staticUpgrade pcre-cpp | Nov 17, 2021 | Jun 15, 2020 |
| Redhat_linux | — | Upgrade pcre-cppUpgrade pcre-tools-debuginfoUpgrade pcre-develUpgrade pcre-utf16-debuginfoUpgrade pcreUpgrade pcre-cpp-debuginfoUpgrade pcre-debugsourceUpgrade pcre-utf16Upgrade pcre-debuginfoUpgrade pcre-staticUpgrade pcre-utf32Upgrade pcre-utf32-debuginfo | Nov 10, 2021 | Jun 15, 2020 |
| Rocky_linux | — | Upgrade pcre-debuginfoUpgrade pcre-cpp-debuginfoUpgrade pcre-develUpgrade pcre-debugsourceUpgrade pcre-utf16Upgrade pcreUpgrade pcre-staticUpgrade pcre-utf32-debuginfoUpgrade pcre-utf32Upgrade pcre-cppUpgrade pcre-utf16-debuginfo | Mar 12, 2024 | Jun 15, 2020 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Universal Forwarder to version 9.1.1Upgrade Splunk Universal Forwarder to version 8.2.12Upgrade Splunk Universal Forwarder to version 9.0.6 | Sep 30, 2025 | Jun 15, 2020 |
| Suse | — | Upgrade pcre-develUpgrade selinux-policyUpgrade libpcreposix0Upgrade pcre-devel-staticUpgrade libpcrecpp0Upgrade pcre-toolsUpgrade libpcre16-0-32bitUpgrade libpcreposix0-32bitUpgrade libpcrecpp0-32bitUpgrade libpcre16-0Upgrade selinux-policy-minimumUpgrade libpcre1-32bitUpgrade pcre-docUpgrade libpcre1Upgrade selinux-policy-devel | Oct 28, 2021 | Jun 15, 2020 |
| Ubuntu | — | Upgrade libpcre3 (Ubuntu Pro)Upgrade libpcre3 | May 18, 2022 | Jun 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 15, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub