An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pcre2 | Mar 26, 2024 | May 16, 2022 |
| Amazon_linux_2023 | — | Upgrade pcre2-debuginfoUpgrade pcre2-staticUpgrade pcre2-utf32-debuginfoUpgrade pcre2-toolsUpgrade pcre2-debugsourceUpgrade pcre2-develUpgrade pcre2Upgrade pcre2-syntaxUpgrade pcre2-utf32Upgrade pcre2-utf16Upgrade pcre2-utf16-debuginfoUpgrade pcre2-tools-debuginfo | Feb 17, 2025 | Mar 26, 2022 |
| Centos_linux | — | Upgrade pcre2-utf32-debuginfoUpgrade pcre2-syntaxUpgrade pcre2-debuginfoUpgrade pcre2-utf16-debuginfoUpgrade pcre2-debugsourceUpgrade pcre2Upgrade pcre2-develUpgrade pcre2-tools-debuginfoUpgrade pcre2-utf16Upgrade pcre2-utf32 | Jul 5, 2022 | May 16, 2022 |
| Debian | — | Upgrade pcre2 | Mar 17, 2023 | May 16, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade pcre2 | Aug 18, 2022 | May 16, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade pcre2-utf16Upgrade pcre2-develUpgrade pcre2Upgrade pcre2-utf32 | Jun 22, 2022 | May 16, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade pcre2 | Sep 14, 2022 | May 16, 2022 |
| Oracle Missing Cpu Oct 2022 | — | Apply the October 2022 Critical Patch Update (CPU) for Oracle Database | Oct 26, 2022 | May 16, 2022 |
| Oracle_linux | — | Upgrade pcre2-develUpgrade pcre2-utf32Upgrade pcre2-syntaxUpgrade pcre2Upgrade pcre2-utf16 | Jul 22, 2024 | Mar 26, 2022 |
| Redhat_linux | — | Upgrade pcre2-debuginfoUpgrade pcre2-utf16Upgrade pcre2-syntaxUpgrade pcre2-debugsourceUpgrade pcre2Upgrade pcre2-tools-debuginfoUpgrade pcre2-develUpgrade pcre2-utf32Upgrade pcre2-utf32-debuginfoUpgrade pcre2-utf16-debuginfo | Jul 5, 2022 | May 16, 2022 |
| Rocky_linux | — | Upgrade pcre2-utf16-debuginfoUpgrade pcre2-utf32-debuginfoUpgrade pcre2-utf32Upgrade pcre2-develUpgrade pcre2-debuginfoUpgrade pcre2-debugsourceUpgrade pcre2-utf16Upgrade pcre2 | Mar 12, 2024 | May 16, 2022 |
| Suse | — | Upgrade pcre2-docUpgrade libpcre2-32-0-32bitUpgrade pcre2-toolsUpgrade pcre2-devel-staticUpgrade libpcre2-32-0Upgrade pcre2-develUpgrade libpcre2-posix2Upgrade libpcre2-16-0-32bitUpgrade libpcre2-8-0Upgrade libpcre2-posix2-32bitUpgrade libpcre2-8-0-32bitUpgrade libpcre2-16-0 | Oct 26, 2022 | May 16, 2022 |
| Ubuntu | — | Upgrade pcre2-utils (Ubuntu Pro)Upgrade libpcre2-32-0Upgrade libpcre2-posix0 (Ubuntu Pro)Upgrade libpcre2-8-0Upgrade libpcre2-16-0Upgrade libpcre2-8-0 (Ubuntu Pro)Upgrade libpcre2-posix3Upgrade pcre2-utilsUpgrade libpcre2-16-0 (Ubuntu Pro)Upgrade libpcre2-posix2Upgrade libpcre2-32-0 (Ubuntu Pro) | Sep 23, 2022 | May 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub