An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-pcre2 | Mar 26, 2024 | May 16, 2022 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-pcre2amazon-linux-2023-upgrade-pcre2-debuginfoamazon-linux-2023-upgrade-pcre2-debugsourceamazon-linux-2023-upgrade-pcre2-develamazon-linux-2023-upgrade-pcre2-staticamazon-linux-2023-upgrade-pcre2-syntaxamazon-linux-2023-upgrade-pcre2-toolsamazon-linux-2023-upgrade-pcre2-tools-debuginfoamazon-linux-2023-upgrade-pcre2-utf16amazon-linux-2023-upgrade-pcre2-utf16-debuginfoamazon-linux-2023-upgrade-pcre2-utf32amazon-linux-2023-upgrade-pcre2-utf32-debuginfo | Feb 17, 2025 | Mar 26, 2022 | |
| Centos_linux | — | centos-upgrade-pcre2centos-upgrade-pcre2-debuginfocentos-upgrade-pcre2-debugsourcecentos-upgrade-pcre2-develcentos-upgrade-pcre2-syntaxcentos-upgrade-pcre2-tools-debuginfocentos-upgrade-pcre2-utf16centos-upgrade-pcre2-utf16-debuginfocentos-upgrade-pcre2-utf32centos-upgrade-pcre2-utf32-debuginfo | Jul 5, 2022 | May 16, 2022 |
| Debian | debian-upgrade-pcre2 | Mar 17, 2023 | May 16, 2022 | |
| Dell Powerstore Dsa2023129 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Apr 4, 2023 | |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-pcre2 | Aug 18, 2022 | May 16, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-pcre2huawei-euleros-2_0_sp8-upgrade-pcre2-develhuawei-euleros-2_0_sp8-upgrade-pcre2-utf16huawei-euleros-2_0_sp8-upgrade-pcre2-utf32 | Jun 22, 2022 | May 16, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-pcre2 | Sep 14, 2022 | May 16, 2022 | |
| Oracle Missing Cpu Oct 2022 | oracle-apply-oct-2022-cpu | Oct 26, 2022 | May 16, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-pcre2oracle-linux-upgrade-pcre2-develoracle-linux-upgrade-pcre2-syntaxoracle-linux-upgrade-pcre2-utf16oracle-linux-upgrade-pcre2-utf32 | Jul 22, 2024 | Mar 26, 2022 |
| Redhat_linux | redhat-upgrade-pcre2redhat-upgrade-pcre2-debuginforedhat-upgrade-pcre2-debugsourceredhat-upgrade-pcre2-develredhat-upgrade-pcre2-syntaxredhat-upgrade-pcre2-tools-debuginforedhat-upgrade-pcre2-utf16redhat-upgrade-pcre2-utf16-debuginforedhat-upgrade-pcre2-utf32redhat-upgrade-pcre2-utf32-debuginfo | Jul 5, 2022 | May 16, 2022 | |
| Rocky_linux | rocky-upgrade-pcre2rocky-upgrade-pcre2-debuginforocky-upgrade-pcre2-debugsourcerocky-upgrade-pcre2-develrocky-upgrade-pcre2-utf16rocky-upgrade-pcre2-utf16-debuginforocky-upgrade-pcre2-utf32rocky-upgrade-pcre2-utf32-debuginfo | Mar 12, 2024 | May 16, 2022 | |
| Suse | — | suse-upgrade-libpcre2-16-0suse-upgrade-libpcre2-16-0-32bitsuse-upgrade-libpcre2-32-0suse-upgrade-libpcre2-32-0-32bitsuse-upgrade-libpcre2-8-0suse-upgrade-libpcre2-8-0-32bitsuse-upgrade-libpcre2-posix2suse-upgrade-libpcre2-posix2-32bitsuse-upgrade-pcre2-develsuse-upgrade-pcre2-devel-staticsuse-upgrade-pcre2-docsuse-upgrade-pcre2-tools | Oct 26, 2022 | May 16, 2022 |
| Ubuntu | ubuntu-pro-upgrade-libpcre2-16-0ubuntu-pro-upgrade-libpcre2-32-0ubuntu-pro-upgrade-libpcre2-8-0ubuntu-pro-upgrade-libpcre2-posix0ubuntu-pro-upgrade-pcre2-utilsubuntu-upgrade-libpcre2-16-0ubuntu-upgrade-libpcre2-32-0ubuntu-upgrade-libpcre2-8-0ubuntu-upgrade-libpcre2-posix2ubuntu-upgrade-libpcre2-posix3ubuntu-upgrade-pcre2-utils | Sep 23, 2022 | May 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub