An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.

🗓️ 26 May 2022 07:00:00Reported by MicrosoftType

Out-of-bounds read in PCRE2 get_recurse_data_length() in pcre2_jit_compile.c affects JIT regex recursions.

Reporter	Title	Published	Views	Family All 112
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by vulnerability (CVE-2022-1587)	2 Feb 202320:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console has addressed multiple PCRE and PCRE2 library vulnerabilities (CVE-2022-1587, CVE-2019-20838, CVE-2022-1586)	29 May 202420:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Shares is vulnerable to multiple high severity vulnerabilities (CVE-2022-1586, CVE-2022-4304, CVE-2023-0215, CVE-2023-0286, CVE-2019-20838, CVE-2022-2068, CVE-2022-1587)	5 Feb 202517:01	–	ibm
ATTACKERKB	CVE-2022-1587	16 May 202221:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : pcre2, pcre2-devel, pcre2-static (ALAS2022-2022-071)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : pcre2, pcre2-devel, pcre2-static (ALAS2022-2022-191)	5 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : pcre2, pcre2-devel, pcre2-static (ALAS2023-2023-045)	21 Mar 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : pcre2 (ALSA-2022:5251)	16 Nov 202200:00	–	nessus
Tenable Nessus	Debian dla-3363 : libpcre2-16-0 - security update	16 Mar 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : pcre2 (EulerOS-SA-2022-1945)	22 Jun 202200:00	–	nessus