libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-pcrealma-upgrade-pcre-cppalma-upgrade-pcre-develalma-upgrade-pcre-staticalma-upgrade-pcre-utf16alma-upgrade-pcre-utf32 | May 4, 2022 | Jun 15, 2020 | |
| Apple Osx Pcre | apple-osx-upgrade-latest | Nov 13, 2020 | Jun 15, 2020 | |
| Apple Osx Screensharing | apple-osx-upgrade-latest | Feb 19, 2021 | Jun 15, 2020 | |
| Centos_linux | — | centos-upgrade-pcrecentos-upgrade-pcre-cppcentos-upgrade-pcre-cpp-debuginfocentos-upgrade-pcre-debuginfocentos-upgrade-pcre-debugsourcecentos-upgrade-pcre-develcentos-upgrade-pcre-tools-debuginfocentos-upgrade-pcre-utf16centos-upgrade-pcre-utf16-debuginfocentos-upgrade-pcre-utf32centos-upgrade-pcre-utf32-debuginfo | Nov 10, 2021 | Jun 15, 2020 |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Jun 15, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-pcreoracle-linux-upgrade-pcre-cpporacle-linux-upgrade-pcre-develoracle-linux-upgrade-pcre-staticoracle-linux-upgrade-pcre-utf16oracle-linux-upgrade-pcre-utf32 | Nov 17, 2021 | Jun 15, 2020 |
| Redhat_linux | redhat-upgrade-pcreredhat-upgrade-pcre-cppredhat-upgrade-pcre-cpp-debuginforedhat-upgrade-pcre-debuginforedhat-upgrade-pcre-debugsourceredhat-upgrade-pcre-develredhat-upgrade-pcre-staticredhat-upgrade-pcre-tools-debuginforedhat-upgrade-pcre-utf16redhat-upgrade-pcre-utf16-debuginforedhat-upgrade-pcre-utf32redhat-upgrade-pcre-utf32-debuginfo | Nov 10, 2021 | Jun 15, 2020 | |
| Rocky_linux | rocky-upgrade-pcrerocky-upgrade-pcre-cpprocky-upgrade-pcre-cpp-debuginforocky-upgrade-pcre-debuginforocky-upgrade-pcre-debugsourcerocky-upgrade-pcre-develrocky-upgrade-pcre-staticrocky-upgrade-pcre-utf16rocky-upgrade-pcre-utf16-debuginforocky-upgrade-pcre-utf32rocky-upgrade-pcre-utf32-debuginfo | Mar 12, 2024 | Jun 15, 2020 | |
| Splunk | splunk-upgrade-latest | Sep 30, 2025 | Jun 15, 2020 | |
| Suse | — | suse-upgrade-libpcre1suse-upgrade-libpcre1-32bitsuse-upgrade-libpcre16-0suse-upgrade-libpcre16-0-32bitsuse-upgrade-libpcrecpp0suse-upgrade-libpcrecpp0-32bitsuse-upgrade-libpcreposix0suse-upgrade-libpcreposix0-32bitsuse-upgrade-pcre-develsuse-upgrade-pcre-devel-staticsuse-upgrade-pcre-docsuse-upgrade-pcre-toolssuse-upgrade-selinux-policysuse-upgrade-selinux-policy-develsuse-upgrade-selinux-policy-minimum | Oct 28, 2021 | Jun 15, 2020 |
| Ubuntu | ubuntu-pro-upgrade-libpcre3ubuntu-upgrade-libpcre3 | May 18, 2022 | Jun 15, 2020 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub