Fedora 31 : mingw-pcre2 (2020-b11cf352bd)

FIx CVE-2019-20454 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...

pcre2:pcre2_fuzzer: Heap-buffer-overflow in parse_regex

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed Report: https://oss-fuzz.com/testcase?key=6006419118882816 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzerasani386pcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf4d0067e...

Huawei EulerOS: Security Advisory for pcre2 (EulerOS-SA-2020-1702)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.6.0 : pcre2 (EulerOS-SA-2020-1702)

According to the version of the pcre2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - An out-of-bounds read was discovered in PCRE when the pattern '\X' is JIT compiled and used to match specially crafted...

CVE-2019-20838

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454. Mitigation Do not use more than one fixed quantifier with \R or \X with UTF disabled in PCRE or PCRE2, as these are the...

GLSA-202006-16 : PCRE2: Denial of service

The remote host is affected by the vulnerability described in GLSA-202006-16 PCRE2: Denial of service PCRE2 has a flaw when handling JIT-compiled regex using the \X pattern. Impact : An attacker could cause a possible Denial of Service condition. Workaround : There is no known workaround at this...

PCRE2: Denial of service

Background PCRE2 is a project based on PCRE Perl Compatible Regular Expressions which has a new and revised API. Description PCRE2 has a flaw when handling JIT-compiled regex using the \X pattern. Impact An attacker could cause a possible Denial of Service condition. Workaround There is no known...

Huawei EulerOS: Security Advisory for pcre2 (EulerOS-SA-2020-1510)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : pcre2 (EulerOS-SA-2020-1510)

According to the version of the pcre2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An out-of-bounds read was discovered in PCRE when the pattern '\X' is JIT compiled and used to match specially crafted subjects in non-UTF mode...

pcre2:pcre2_fuzzer: Heap-buffer-overflow in set_start_bits

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed Report: https://oss-fuzz.com/testcase?key=5170113773043712 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzerasani386pcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf2b04f6a...

pcre2:pcre2_fuzzer: Crash in match

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed Report: https://oss-fuzz.com/testcase?key=6290883744104448 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzermsanpcre2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fff9416d140 Crash State:...

pcre2:pcre2_fuzzer: Heap-buffer-overflow in set_table_bit

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed Report: https://oss-fuzz.com/testcase?key=5082586231865344 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61100000043b...

Huawei EulerOS: Security Advisory for pcre2 (EulerOS-SA-2019-1983)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2019-0307 Updated php and pcre2 packages fix security vulnerabilities

Updated php and pcre2 packages fix security vulnerabilities: - FPM 78599 envpathinfo underflow in fpmmain.c can lead to RCE. CVE-2019-11043 - MBString 78633 Heap buffer overflow read in mberegi. - Mysqlnd 78525 Memory leak in pdo when reusing native prepared statements. - PCRE 78272 calling...

Updated php and pcre2 packages fix security vulnerabilities

Updated php and pcre2 packages fix security vulnerabilities: - FPM 78599 envpathinfo underflow in fpmmain.c can lead to RCE. CVE-2019-11043 - MBString 78633 Heap buffer overflow read in mberegi. - Mysqlnd 78525 Memory leak in pdo when reusing native prepared statements. - PCRE 78272 calling...

EulerOS 2.0 SP5 : pcre2 (EulerOS-SA-2019-1983)

According to the version of the pcre2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact...

pcre2:pcre2_fuzzer: Crash in compile_branch

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed Report: https://oss-fuzz.com/testcase?key=5673855447728128 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzermsanpcre2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000079355f Crash State:...

pcre2/pcre2_fuzzer: Stack-buffer-overflow in get_grouplength

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://oss-fuzz.com/testcase?key=5643597614940160 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

pcre2/pcre2_fuzzer: Heap-buffer-overflow in _pcre2_check_escape_8

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed report: https://oss-fuzz.com/testcase?key=5659000685723648 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type:...

pcre2/pcre2_fuzzer: Heap-buffer-overflow in read_name

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed report: https://oss-fuzz.com/testcase?key=5761668473159680 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type:...