Lucene search

K
redhatcveRedhat.comRH:CVE-2019-20838
HistoryJun 18, 2020 - 11:55 a.m.

CVE-2019-20838

2020-06-1811:55:13
redhat.com
access.redhat.com
33

0.01 Low

EPSS

Percentile

83.9%

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.

Mitigation

Do not use more than one fixed quantifier with \R or \X with UTF disabled in PCRE or PCRE2, as these are the conditions needed to trigger the flaw.