An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.
References
| Link | Resource |
|---|---|
| https://bugs.exim.org/show_bug.cgi?id=2421 | Issue Tracking Permissions Required Third Party Advisory |
| https://bugs.php.net/bug.php?id=78338 | Exploit Issue Tracking Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1735494 | Issue Tracking Patch Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2023/03/msg00014.html | Mailing List Third Party Advisory |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQRAHYHLRNMBTPR3KXVM27NSZP3KTOPI/ | Mailing List Third Party Advisory |
| https://security.gentoo.org/glsa/202006-16 | Third Party Advisory |
| https://vcs.pcre.org/pcre2?view=revision&revision=1092 | Broken Link Patch |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
27 Mar 2024, 16:05
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:* |
|
| First Time |
Splunk universal Forwarder
Splunk |
|
| References | () https://lists.debian.org/debian-lts-announce/2023/03/msg00014.html - Mailing List, Third Party Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQRAHYHLRNMBTPR3KXVM27NSZP3KTOPI/ - Mailing List, Third Party Advisory |
16 Mar 2023, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| References | (MISC) https://vcs.pcre.org/pcre2?view=revision&revision=1092 - Broken Link, Patch | |
| References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQRAHYHLRNMBTPR3KXVM27NSZP3KTOPI/ - Mailing List, Third Party Advisory | |
| References | (MISC) https://bugs.exim.org/show_bug.cgi?id=2421 - Issue Tracking, Permissions Required, Third Party Advisory | |
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1735494 - Issue Tracking, Patch, Third Party Advisory | |
| References | (GENTOO) https://security.gentoo.org/glsa/202006-16 - Third Party Advisory | |
| CPE | cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* |
Information
Published : 2020-02-14 14:15
Updated : 2024-03-27 16:05
NVD link : CVE-2019-20454
Mitre link : CVE-2019-20454
CVE.ORG link : CVE-2019-20454
JSON object : View
Products Affected
fedoraproject
- fedora
pcre
- pcre2
splunk
- universal_forwarder
CWE
CWE-125
Out-of-bounds Read