DeutschShown in its original language — a full translation is planned for a future version.
PCRE (Perl Compatible Regular Expressions): Mehrere Schwachstellen
view advisory published 2020-06-15
Ein lokaler Angreifer kann mehrere Schwachstellen in PCRE (Perl Compatible Regular Expressions) ausnutzen, um einen Denial of Service Angriff durchzuführen oder weitere, nicht definierte Auswirkungen zu erzielen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-14155US | medium5.3 | — | ||
libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring. | ||||
| CVE-2019-20838US | high7.5 | — | ||
libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454. | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2021:4373 vom 2021-11-09external
- Red Hat Security Advisory RHSA-2021:4613 vom 2021-11-10external
- Red Hat Security Advisory RHSA-2021:4614 vom 2021-11-10external
- Red Hat Security Advisory RHSA-2021:4845 vom 2021-11-29external
- Red Hat Security Advisory RHSA-2021:4848 vom 2021-11-29external
- Red Hat Security Advisory RHSA-2022:0318 vom 2022-01-27external
- Red Hat Security Advisory RHSA-2022:0434 vom 2022-02-04external
- AVAYA Security Advisory ASA-2021-160 vom 2021-11-11external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan