libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pcre-utf16Upgrade pcreUpgrade pcre-staticUpgrade pcre-utf32Upgrade pcre-cppUpgrade pcre-devel | May 4, 2022 | Jun 15, 2020 |
| Apple Osx Pcre | — | Upgrade macOS to the latest version | Nov 13, 2020 | Jun 15, 2020 |
| Apple Osx Screensharing | — | Upgrade macOS to the latest version | Feb 19, 2021 | Jun 15, 2020 |
| Centos_linux | — | Upgrade pcre-debugsourceUpgrade pcre-debuginfoUpgrade pcre-utf32Upgrade pcre-utf16-debuginfoUpgrade pcre-utf16Upgrade pcre-cpp-debuginfoUpgrade pcreUpgrade pcre-cppUpgrade pcre-tools-debuginfoUpgrade pcre-develUpgrade pcre-utf32-debuginfo | Nov 10, 2021 | Jun 15, 2020 |
| Debian | — | No solution exists | May 15, 2025 | Jun 15, 2020 |
| Oracle_linux | — | Upgrade pcre-utf16Upgrade pcre-develUpgrade pcre-utf32Upgrade pcreUpgrade pcre-cppUpgrade pcre-static | Nov 17, 2021 | Jun 15, 2020 |
| Redhat_linux | — | Upgrade pcre-develUpgrade pcreUpgrade pcre-cpp-debuginfoUpgrade pcre-cppUpgrade pcre-utf16-debuginfoUpgrade pcre-tools-debuginfoUpgrade pcre-utf32Upgrade pcre-debuginfoUpgrade pcre-staticUpgrade pcre-debugsourceUpgrade pcre-utf16Upgrade pcre-utf32-debuginfo | Nov 10, 2021 | Jun 15, 2020 |
| Rocky_linux | — | Upgrade pcre-staticUpgrade pcre-utf32Upgrade pcre-utf16-debuginfoUpgrade pcre-cppUpgrade pcre-utf32-debuginfoUpgrade pcre-develUpgrade pcre-debuginfoUpgrade pcre-cpp-debuginfoUpgrade pcre-debugsourceUpgrade pcre-utf16Upgrade pcre | Mar 12, 2024 | Jun 15, 2020 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Universal Forwarder to version 9.1.1Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Universal Forwarder to version 8.2.12Upgrade Splunk Universal Forwarder to version 9.0.6 | Sep 30, 2025 | Jun 15, 2020 |
| Suse | — | Upgrade pcre-toolsUpgrade selinux-policyUpgrade pcre-develUpgrade libpcreposix0-32bitUpgrade libpcreposix0Upgrade libpcre16-0-32bitUpgrade pcre-devel-staticUpgrade libpcrecpp0Upgrade libpcrecpp0-32bitUpgrade libpcre1Upgrade selinux-policy-develUpgrade pcre-docUpgrade libpcre1-32bitUpgrade selinux-policy-minimumUpgrade libpcre16-0 | Oct 28, 2021 | Jun 15, 2020 |
| Ubuntu | — | Upgrade libpcre3Upgrade libpcre3 (Ubuntu Pro) | May 18, 2022 | Jun 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub