Most recent entries from all

ALSA-2022:5809 — Moderate: pcre2 security update

Affected: AlmaLinux:8: pcre2, AlmaLinux:8: pcre2-devel, AlmaLinux:8: pcre2-tools, AlmaLinux:8: pcre2-utf16, AlmaLinux:8: pcre2-utf32

The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl. Security Fix(es): * pcre2: Out-of-bounds read in compile_xclass_matchingpath in pcre2_jit_compile.c (CVE-2022-1586) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2022-03770

Withdrawn: BELL-CVE-2022-1586 — CVE-2022-1586 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2023-avi-0174 — De multiples vulnérabilités ont été découvertes dans IBM QRadar. Certaines d'entre elles permettent à un attaquant de p…

certfr-2023-avi-0174

CLEANSTART-2024-KR97455 — out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of t…

Affected: CleanStart: pcre2

Security vulnerability affects the pcre2 package. An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.

EUVD-2026-221011

fkie_cve-2022-1586

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.

FSA-202302 — Festo: Several vulnerabilities in FactoryViews

FactoryViews bundles many third-party applications which are used in background processes to provide the software's features. From time to time, vulnerabilities in these bundled applications are discovered. These are typically fixed in newer versions of FactoryViews by updating the bundled applications.

FactoryViews versions up to and including 1.5.2 contain around 200 such vulnerabilities listed in this advisory.Version 1.6.0 is a security rollup release which includes updates to all bundled applications and fixes these vulnerabilities.

At this time, FactoryViews Lite cannot be updated beyond version 1.1. FactoryViews 1.7 unifies the non-Lite and Lite versions and fixes these vulnerabilities for users of FactoryViews Lite.

GHSA-f3pv-9fwh-mp3x

gsd-2022-1586

msrc_CVE-2022-1586 — An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function o…

msrc_CVE-2022-1586

OESA-2022-1686 — pcre2 security update

Affected: openEuler:20.03-LTS-SP1: pcre2, openEuler:20.03-LTS-SP3: pcre2, openEuler:22.03-LTS: pcre2

PCRE2 is a re-working of the original PCRE1 library to provide an entirely new API. Since its initial release in 2015, there has been further development of the code and it now differs from PCRE1 in more than just the API. PCRE2 is written in C, and it has its own API. There are three sets of functions, one for the 8-bit library, which processes strings of bytes, one for the 16-bit library, which processes strings of 16-bit values, and one for the 32-bit library, which processes strings of 32-bit values. Unlike PCRE1, there are no C++ wrappers.

Security Fix(es):

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.(CVE-2022-1587)

openSUSE-SU-2022:2361-1 — Security update for pcre

Security update for pcre

SUSE-RU-2022:1883-1 — Recommended update for pcre2

Recommended update for pcre2

UBUNTU-CVE-2022-1586

Affected: Ubuntu:16.04:LTS: pcre2, Ubuntu:Pro:18.04:LTS: pcre2, Ubuntu:20.04:LTS: pcre2, Ubuntu:22.04:LTS: pcre2

WID-SEC-W-2022-0523 — PCRE2: Mehrere Schwachstellen ermöglichen Denial of Service

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PCRE2 (Perl Compatible Regular Expressions) ausnutzen, um einen Denial of Service Angriff durchzuführen.