Important Photon OS Security Update - PHSA-2020-0108

Updates of 'redis', 'pcre', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0256

An update of 'linux', 'redis', 'linux-esx', 'linux-secure', 'linux-aws', 'pcre' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2020-0256

Updates of 'linux-aws', 'linux-secure', 'pcre', 'redis', 'linux-esx', 'linux' packages of Photon OS have been released...

CVE-2019-20838

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454. Mitigation Do not use more than one fixed quantifier with \R or \X with UTF disabled in PCRE or PCRE2, as these are the...

EulerOS 2.0 SP2 : glib2 (EulerOS-SA-2020-1654)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service...

PCRE Buffer Overflow Vulnerability (CNVD-2020-52703)

PCRE is a Philip Hazel software developers of an open source regular expression library written in C language. A buffer overflow vulnerability exists in libpcre in versions of PCRE prior to 8.43. The vulnerability stems from a networked system or product performing operations in memory without...

CVE-2020-14155

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a ?C substring...

CVE-2020-14155

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a ?C substring...

DEBIAN-CVE-2019-20838

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454...

CVE-2020-14155

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a ?C substring...

Integer overflow

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a ?C substring...

UBUNTU-CVE-2020-14155

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a ?C substring...

CVE-2019-20838

CVE-2019-20838 is a PCRE/PCRE2 vulnerability where libpcre had a subject buffer over-read during JIT compilation in non-UTF mode when the pattern uses \X or \R with more than one fixed quantifier. Affected versions include PCRE up to 8.43; remediation is to upgrade to a patched PCRE (e.g., 8.43+;...

CVE-2019-20838

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454...

CVE-2020-14155

CVE-2020-14155 concerns the PCRE library: libpcre in PCRE versions prior to 8.44 allows an integer overflow when parsing a large number after a (?C substring. The issue is the result of an input validation/overflow bug in PCRE’s handling of certain regular expressions, potentially enabling memory...

CVE-2020-14155: Integer Overflow or Wraparound

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a ?C substring...

CVE-2020-14155

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a ?C substring...

CVE-2019-20838: Out-of-bounds Read

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454...

CVE-2020-14155

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a ?C substring...

Security Bulletin: IBM MQ Appliance is affected by a PCRE vulnerability (CVE-2017-16231)

Summary IBM MQ Appliance has addressed the following PCRE vulnerability. Vulnerability Details CVEID: CVE-2017-16231 DESCRIPTION: DISPUTED In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match in pcreexec.c because of a self-recursive call. NOTE:...