vulnerability

SUSE: CVE-2019-20838: SUSE Linux Security Advisory

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Jun 15, 2020
Added
Oct 28, 2021
Modified
Nov 11, 2021

Description

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.

Solutions

suse-upgrade-libpcre1suse-upgrade-libpcre1-32bitsuse-upgrade-libpcre16-0suse-upgrade-libpcre16-0-32bitsuse-upgrade-libpcrecpp0suse-upgrade-libpcrecpp0-32bitsuse-upgrade-libpcreposix0suse-upgrade-libpcreposix0-32bitsuse-upgrade-pcre-develsuse-upgrade-pcre-devel-staticsuse-upgrade-pcre-docsuse-upgrade-pcre-toolssuse-upgrade-selinux-policysuse-upgrade-selinux-policy-develsuse-upgrade-selinux-policy-minimum
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.