Lucene search
Veracode Vulnerability DatabaseVERACODE:27820HistoryNov 05, 2020 - 3:19 a.m.
Denial Of Service (DoS)
2020-11-0503:19:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.001 Low
EPSS
Percentile
51.2%
pcre is vulnerable to denial of service (DoS). It is possible because of out of bounds read in JIT mode when \X is used in non-UTF mode.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pcre2 | eq | 10.32__1.el8 | |
| pcre2 | eq | 10.32__1.el8 |
References
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/
access.redhat.com/errata/RHSA-2020:4539
access.redhat.com/security/updates/classification/#moderate
bugs.exim.org/show_bug.cgi?id=2421
bugs.php.net/bug.php?id=78338
bugzilla.redhat.com/show_bug.cgi?id=1735494
lists.debian.org/debian-lts-announce/2023/03/msg00014.html
lists.fedoraproject.org/archives/list/[email protected]/message/OQRAHYHLRNMBTPR3KXVM27NSZP3KTOPI/
security.gentoo.org/glsa/202006-16
vcs.pcre.org/pcre2?view=revision&revision=1092
Related
openvas
openvas
Huawei EulerOS: Security Advisory for pcre2 (EulerOS-SA-2020-1702)
2020-06-26 00:00:00
Fedora: Security Advisory for mingw-pcre2 (FEDORA-2020-b11cf352bd)
2020-07-12 00:00:00
Mageia: Security Advisory (MGASA-2020-0305)
2022-01-28 00:00:00
nessus
nessus
CentOS 8 : pcre2 (CESA-2020:4539)
2021-02-01 00:00:00
Rocky Linux 8 : pcre2 (RLSA-2020:4539)
2023-11-07 00:00:00
Fedora 31 : mingw-pcre2 (2020-b11cf352bd)
2020-07-09 00:00:00
almalinux
almalinux
Moderate: pcre2 security and enhancement update
2020-11-03 12:13:54
Moderate: php:7.3 security, bug fix, and enhancement update
2020-09-08 08:38:31
osv
osv
Moderate: pcre2 security and enhancement update
2020-11-03 12:13:54
CVE-2019-20454
2020-02-14 14:15:10
Moderate: pcre2 security and enhancement update
2020-11-03 12:13:54
redhatcve
redhatcve
CVE-2019-20454
2020-02-14 14:37:56
CVE-2019-20838
2020-06-18 11:55:13
prion
prion
Input validation
2020-02-14 14:15:00
Design/Logic Flaw
2020-06-15 17:15:00
redhat
redhat
(RHSA-2020:4539) Moderate: pcre2 security and enhancement update
2020-11-03 12:13:54
(RHSA-2020:3662) Moderate: php:7.3 security, bug fix, and enhancement update
2020-09-08 08:38:31
cve
cve
CVE-2019-20454
2020-02-14 14:15:10
CVE-2019-20838
2020-06-15 17:15:09
rocky
rocky
pcre2 security and enhancement update
2020-11-03 12:13:54
php:7.3 security, bug fix, and enhancement update
2020-09-08 08:38:31
cvelist
cvelist
CVE-2019-20454
2020-02-14 00:00:00
CVE-2019-20838
2020-06-15 16:50:48
oraclelinux
oraclelinux
pcre2 security and enhancement update
2020-11-10 00:00:00
php:7.3 security, bug fix, and enhancement update
2020-09-09 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: mingw-pcre2-10.33-3.fc31
2020-07-09 01:07:27
ubuntucve
ubuntucve
CVE-2019-20454
2020-02-14 00:00:00
CVE-2019-20838
2020-06-15 00:00:00
mageia
mageia
Updated pcre2 packages fix security vulnerability
2020-08-01 02:25:42
debiancve
debiancve
CVE-2019-20454
2020-02-14 14:15:10
CVE-2019-20838
2020-06-15 17:15:09
nvd
nvd
CVE-2019-20454
2020-02-14 14:15:10
CVE-2019-20838
2020-06-15 17:15:09
gentoo
gentoo
PCRE2: Denial of service
2020-06-15 00:00:00
suse
suse
Security update for pcre2 (important)
2022-09-01 00:00:00
Security update for pcre2 (important)
2022-08-03 00:00:00
debian
debian
[SECURITY] [DLA 3363-1] pcre2 security update
2023-03-16 02:35:51
rosalinux
rosalinux
Advisory ROSA-SA-2021-1947
2021-07-02 17:40:57
