CVE-2022-1587

🗓️ 16 May 2022 00:00:00Reported by Debian Security Bug TrackerType

debiancve

debiancve🔗 security-tracker.debian.org👁 65 Views

An out-of-bounds read vulnerability in PCRE2 librar

Reporter	Title	Published	Views	Family All 112
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by vulnerability (CVE-2022-1587)	2 Feb 202320:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console has addressed multiple PCRE and PCRE2 library vulnerabilities (CVE-2022-1587, CVE-2019-20838, CVE-2022-1586)	29 May 202420:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Shares is vulnerable to multiple high severity vulnerabilities (CVE-2022-1586, CVE-2022-4304, CVE-2023-0215, CVE-2023-0286, CVE-2019-20838, CVE-2022-2068, CVE-2022-1587)	5 Feb 202517:01	–	ibm
ATTACKERKB	CVE-2022-1587	16 May 202221:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : pcre2, pcre2-devel, pcre2-static (ALAS2022-2022-071)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : pcre2, pcre2-devel, pcre2-static (ALAS2022-2022-191)	5 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : pcre2, pcre2-devel, pcre2-static (ALAS2023-2023-045)	21 Mar 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : pcre2 (ALSA-2022:5251)	16 Nov 202200:00	–	nessus
Tenable Nessus	Debian dla-3363 : libpcre2-16-0 - security update	16 Mar 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : pcre2 (EulerOS-SA-2022-1945)	22 Jun 202200:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	all	pcre2	10.36-2+deb11u1	pcre2_10.36-2+deb11u1_all.deb
Debian	12	all	pcre2	10.40-1	pcre2_10.40-1_all.deb
Debian	13	all	pcre2	10.40-1	pcre2_10.40-1_all.deb
Debian	14	all	pcre2	10.40-1	pcre2_10.40-1_all.deb
Debian	999	all	pcre2	10.40-1	pcre2_10.40-1_all.deb

16 May 2022 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 26.4

CVSS 3.19.1

EPSS0.02724

cve-2022-1587 pcre2 library out-of-bounds read jit-compiled regular expressions recursion duplicate data transfers unix