An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-pcre2alma-upgrade-pcre2-develalma-upgrade-pcre2-toolsalma-upgrade-pcre2-utf16alma-upgrade-pcre2-utf32 | Aug 11, 2022 | May 16, 2022 | |
| Alpine Linux | alpine-linux-upgrade-pcre2 | Mar 26, 2024 | May 16, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-pcre2amazon-linux-ami-2-upgrade-pcre2-debuginfoamazon-linux-ami-2-upgrade-pcre2-develamazon-linux-ami-2-upgrade-pcre2-staticamazon-linux-ami-2-upgrade-pcre2-toolsamazon-linux-ami-2-upgrade-pcre2-utf16amazon-linux-ami-2-upgrade-pcre2-utf32 | Nov 10, 2022 | May 16, 2022 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-pcre2amazon-linux-2023-upgrade-pcre2-debuginfoamazon-linux-2023-upgrade-pcre2-debugsourceamazon-linux-2023-upgrade-pcre2-develamazon-linux-2023-upgrade-pcre2-staticamazon-linux-2023-upgrade-pcre2-syntaxamazon-linux-2023-upgrade-pcre2-toolsamazon-linux-2023-upgrade-pcre2-tools-debuginfoamazon-linux-2023-upgrade-pcre2-utf16amazon-linux-2023-upgrade-pcre2-utf16-debuginfoamazon-linux-2023-upgrade-pcre2-utf32amazon-linux-2023-upgrade-pcre2-utf32-debuginfo | Feb 17, 2025 | Mar 23, 2022 | |
| Centos_linux | — | centos-upgrade-pcre2centos-upgrade-pcre2-debuginfocentos-upgrade-pcre2-debugsourcecentos-upgrade-pcre2-develcentos-upgrade-pcre2-syntaxcentos-upgrade-pcre2-tools-debuginfocentos-upgrade-pcre2-utf16centos-upgrade-pcre2-utf16-debuginfocentos-upgrade-pcre2-utf32centos-upgrade-pcre2-utf32-debuginfo | Jul 5, 2022 | May 16, 2022 |
| Debian | debian-upgrade-pcre2 | Mar 17, 2023 | May 16, 2022 | |
| Dell Powerstore Dsa2023129 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Apr 4, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-pcre2 | Aug 18, 2022 | May 16, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-pcre2 | Aug 18, 2022 | May 16, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-pcre2huawei-euleros-2_0_sp8-upgrade-pcre2-develhuawei-euleros-2_0_sp8-upgrade-pcre2-utf16huawei-euleros-2_0_sp8-upgrade-pcre2-utf32 | Jun 22, 2022 | May 16, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-pcre2 | Sep 14, 2022 | May 16, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-pcre2oracle-linux-upgrade-pcre2-develoracle-linux-upgrade-pcre2-syntaxoracle-linux-upgrade-pcre2-toolsoracle-linux-upgrade-pcre2-utf16oracle-linux-upgrade-pcre2-utf32 | Aug 3, 2022 | Mar 23, 2022 |
| Redhat_linux | redhat-upgrade-pcre2redhat-upgrade-pcre2-debuginforedhat-upgrade-pcre2-debugsourceredhat-upgrade-pcre2-develredhat-upgrade-pcre2-syntaxredhat-upgrade-pcre2-toolsredhat-upgrade-pcre2-tools-debuginforedhat-upgrade-pcre2-utf16redhat-upgrade-pcre2-utf16-debuginforedhat-upgrade-pcre2-utf32redhat-upgrade-pcre2-utf32-debuginfo | Jul 5, 2022 | May 16, 2022 | |
| Rocky_linux | rocky-upgrade-pcre2rocky-upgrade-pcre2-debuginforocky-upgrade-pcre2-debugsourcerocky-upgrade-pcre2-develrocky-upgrade-pcre2-toolsrocky-upgrade-pcre2-tools-debuginforocky-upgrade-pcre2-utf16rocky-upgrade-pcre2-utf16-debuginforocky-upgrade-pcre2-utf32rocky-upgrade-pcre2-utf32-debuginfo | Mar 12, 2024 | May 16, 2022 | |
| Suse | — | suse-upgrade-libpcre1suse-upgrade-libpcre1-32bitsuse-upgrade-libpcre16-0suse-upgrade-libpcre16-0-32bitsuse-upgrade-libpcre2-16-0suse-upgrade-libpcre2-16-0-32bitsuse-upgrade-libpcre2-32-0suse-upgrade-libpcre2-32-0-32bitsuse-upgrade-libpcre2-8-0suse-upgrade-libpcre2-8-0-32bitsuse-upgrade-libpcre2-posix2suse-upgrade-libpcre2-posix2-32bitsuse-upgrade-libpcrecpp0suse-upgrade-libpcrecpp0-32bitsuse-upgrade-libpcreposix0suse-upgrade-libpcreposix0-32bitsuse-upgrade-pcre-develsuse-upgrade-pcre-devel-staticsuse-upgrade-pcre-docsuse-upgrade-pcre-toolssuse-upgrade-pcre2-develsuse-upgrade-pcre2-devel-staticsuse-upgrade-pcre2-docsuse-upgrade-pcre2-tools | Oct 26, 2022 | May 16, 2022 |
| Ubuntu | ubuntu-pro-upgrade-libpcre2-16-0ubuntu-pro-upgrade-libpcre2-32-0ubuntu-pro-upgrade-libpcre2-8-0ubuntu-pro-upgrade-libpcre2-posix0ubuntu-pro-upgrade-pcre2-utilsubuntu-upgrade-libpcre2-16-0ubuntu-upgrade-libpcre2-32-0ubuntu-upgrade-libpcre2-8-0ubuntu-upgrade-libpcre2-posix2ubuntu-upgrade-libpcre2-posix3ubuntu-upgrade-pcre2-utils | Sep 23, 2022 | May 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub