CVE-2019-20838

概要

参考情報

• seclists.org/fulldisclosure/2020/Dec/32 · Mailing List
• seclists.org/fulldisclosure/2021/Feb/14 · Mailing List
• bugs.gentoo.org/717920 · Issue Tracking
• lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E · Mailing List
• support.apple.com/kb/HT211931 · Vendor Advisory
• support.apple.com/kb/HT212147 · Vendor Advisory
• pcre.org/original/changelog.txt · Release Notes

pcre のその他の脆弱性

• CVE-2020-14155中 5.3libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
• CVE-2015-2326中 5.5The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (o…
• CVE-2015-2325高 7.8The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out…
• CVE-2017-16231中 5.5In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-r…
• CVE-2017-11164高 7.5In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a…