68 matches found
CVE-2019-20838
libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454. Mitigation Do not use more than one fixed quantifier with \R or \X with UTF disabled in PCRE or PCRE2, as these are the...
GLSA-202006-16 : PCRE2: Denial of service
The remote host is affected by the vulnerability described in GLSA-202006-16 PCRE2: Denial of service PCRE2 has a flaw when handling JIT-compiled regex using the \X pattern. Impact : An attacker could cause a possible Denial of Service condition. Workaround : There is no known workaround at this...
CVE-2019-20454
creationtimestamp| type| source ---|---|--- 2020-06-15 20:46:03+00:00| seen| https://t.me/VulnerabilityNews/15221 2020-06-15 20:55:15+00:00| seen| https://t.me/cibsecurity/12748...
DEBIAN-CVE-2019-20838
libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454...
Design/Logic Flaw
libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454...
CVE-2019-20454
CVE-2019-20454 is a PCRE2 out-of-bounds read vulnerability triggered when the pattern \X is JIT-compiled and matched in non-UTF mode. The flaw occurs in do_extuni_no_utf inside pcre2_jit_compile.c and can cause an application crash when parsing untrusted input. Affected history and related adviso...
