CVE-2022-1586

🗓️ 16 May 2022 00:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 9 Media mentions👁 292 Views

CVE-2022-1586: PCRE2 library unicode property matching issu

Reporter	Title	Published	Views	Family All 151
IBM Security Bulletins	Security Bulletin:IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from openssl, pcre2 and Golang Go	31 Aug 202216:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console has addressed multiple PCRE and PCRE2 library vulnerabilities (CVE-2022-1587, CVE-2019-20838, CVE-2022-1586)	29 May 202420:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities.	15 Dec 202209:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to arbitrary code execution due to CVE-2022-1586	7 Nov 202210:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Shares is vulnerable to multiple high severity vulnerabilities (CVE-2022-1586, CVE-2022-4304, CVE-2023-0215, CVE-2023-0286, CVE-2019-20838, CVE-2022-2068, CVE-2022-1587)	5 Feb 202517:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	27 Feb 202317:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary code execution in PCRE2 (CVE-2022-1586)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by vulnerability (CVE-2022-1586)	2 Feb 202320:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	24 Oct 202220:10	–	ibm

NVD

Vulners

Node

pcre pcre2Range<10.40

Node

fedoraproject fedoraMatch35

fedoraproject fedoraMatch36

Node

redhat enterprise_linuxMatch8.0

redhat enterprise_linuxMatch9.0

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp hci_management_nodeMatch-

netapp ontap_select_deploy_administration_utilityMatch-

netapp solidfireMatch-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

netapp h410c_firmwareMatch-

AND

netapp h410cMatch-

Node

debian debian_linuxMatch10.0

[
  {
    "vendor": "n/a",
    "product": "pcre2",
    "versions": [
      {
        "version": "Fixed in pcre2-10.40.",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/PCRE2Project/pcre2/commit/d4fa336fbcc388f89095b184ba6d99422cfc676c
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2GLQQUEY5VFM57CFYXVIFOXN2HUZPDM/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.debian.org/debian-lts-announce/2023/03/msg00014.html
security	www.security.netapp.com/advisory/ntap-20221028-0009/
github	www.github.com/PCRE2Project/pcre2/commit/50a51cb7e67268e6ad417eb07c9de9bfea5cc55a%2C
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KAX7767BCUFC7JMDGP7GOQ5GIZCAUGBB/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DWNG2NS3GINO6LQYUVC4BZLUQPJ3DYHA/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXINO3KKI5DICQ45E2FKD6MKVMGJLEKJ/
github	www.github.com/PCRE2Project/pcre2/commit/50a51cb7e67268e6ad417eb07c9de9bfea5cc55a

25 Mar 2025 19:39Current

9.1High risk

Vulners AI Score9.1

CVSS 26.4

CVSS 3.19.1

EPSS0.00584

CWE-125