CVE-2019-20838

🗓️ 15 Jun 2020 16:50:48Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 277 Views

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454

Reporter	Title	Published	Views	Family All 95
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified inPCRE, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2019-20838)	4 Jan 202110:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console has addressed multiple PCRE and PCRE2 library vulnerabilities (CVE-2022-1587, CVE-2019-20838, CVE-2022-1586)	29 May 202420:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities fixed in Cloud Pak for Automation components	19 Jan 202216:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is affected by multiple vulnerabilities in Red Hat Universal Base Image version 8.4-206.1626828523 and Binutils version 2.30-93	14 Mar 202220:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Shares is vulnerable to multiple high severity vulnerabilities (CVE-2022-1586, CVE-2022-4304, CVE-2023-0215, CVE-2023-0286, CVE-2019-20838, CVE-2022-2068, CVE-2022-1587)	5 Feb 202517:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with Known Vulnerabilities	25 Apr 202214:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Faspex 4.4.2 has addressed multiple security vulnerabilities	7 Sep 202223:27	–	ibm
Tenable Nessus	AlmaLinux 8 : pcre (ALSA-2021:4373)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : pcre (CESA-2021:4373)	11 Nov 202100:00	–	nessus

NVD

Node

pcre pcreRange<8.43

Node

apple macosRange<11.0.1

Node

splunk universal_forwarderRange8.2.0–8.2.12

splunk universal_forwarderRange9.0.0–9.0.6

splunk universal_forwarderMatch9.1.0

Source	Link
support	www.support.apple.com/kb/HT212147
bugs	www.bugs.gentoo.org/717920
seclists	www.seclists.org/fulldisclosure/2020/Dec/32
lists	www.lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
support	www.support.apple.com/kb/HT211931
seclists	www.seclists.org/fulldisclosure/2021/Feb/14
pcre	www.pcre.org/original/changelog.txt

21 Nov 2024 04:39Current

6.7Medium risk

Vulners AI Score6.7

CVSS 24.3

CVSS 3.17.5

EPSS0.00234

CWE-125