Out-of-bounds read in PCRE2 - CVE-2019-20454

Vulnerability identifier: #VU29116

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-20454

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to perform denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in the "do_extuni_no_utf in pcre2_jit_compile.c" file when the pattern X is JIT compiled and used to match specially crafted subjects in non-UTF mode. A remote attacker can trigger out-of-bounds read error and crash the affected application.

PCRE2
Gentoo Linux
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Module for Basesystem
openSUSE Leap
openEuler
Fedora
Service Telemetry Framework
Red Hat OpenShift Serverless
Quay
OpenShift Data Foundation (formerly OpenShift Container Storage)
Splunk Enterprise
cflinuxfs3
PowerStore T
PowerStore X
Dell EMC VxRail Appliance
libpcre2-16-0-32bit-debuginfo
pcre2-doc
libpcre2-posix2-32bit-debuginfo
libpcre2-posix2-32bit
libpcre2-8-0-32bit-debuginfo
libpcre2-8-0-32bit
libpcre2-32-0-32bit-debuginfo
libpcre2-32-0-32bit
libpcre2-16-0-32bit
pcre2-tools-debuginfo
pcre2-tools
pcre2-devel-static
pcre2-devel
pcre2-debugsource
libpcre2-posix2-debuginfo
libpcre2-posix2
libpcre2-8-0-debuginfo
libpcre2-8-0
libpcre2-32-0-debuginfo
libpcre2-32-0
libpcre2-16-0-debuginfo
libpcre2-16-0
pcre2 (Red Hat package)
pcre2
pcre2-debuginfo
pcre2-help
mingw-pcre2

Install update from vendor's website.

PCRE2 - update to 10.34
Red Hat OpenShift Serverless - addressed in versions 1.10.2, 1.11.0, 1.12.0
Quay - update to 3.3.3
Splunk Enterprise - addressed in versions 8.2.12, 9.0.6, 9.1.1
cflinuxfs3 - update to 0.299.0
PowerStore T - update to 3.2.1.0-1989710
PowerStore X - update to 3.2.1.0-1989710
Dell EMC VxRail Appliance - update to 8.0.000
libpcre2-16-0-32bit-debuginfo - update to 10.31-150000.3.12.1
pcre2-doc - update to 10.31-150000.3.12.1
libpcre2-posix2-32bit-debuginfo - update to 10.31-150000.3.12.1
libpcre2-posix2-32bit - update to 10.31-150000.3.12.1
libpcre2-8-0-32bit-debuginfo - update to 10.31-150000.3.12.1
libpcre2-8-0-32bit - update to 10.31-150000.3.12.1
libpcre2-32-0-32bit-debuginfo - update to 10.31-150000.3.12.1
libpcre2-32-0-32bit - update to 10.31-150000.3.12.1
libpcre2-16-0-32bit - update to 10.31-150000.3.12.1
pcre2-tools-debuginfo - update to 10.31-150000.3.12.1
pcre2-tools - update to 10.31-150000.3.12.1
pcre2-devel-static - update to 10.31-150000.3.12.1
pcre2-devel - update to 10.31-150000.3.12.1
pcre2-debugsource - update to 10.31-150000.3.12.1
libpcre2-posix2-debuginfo - update to 10.31-150000.3.12.1
libpcre2-posix2 - update to 10.31-150000.3.12.1
libpcre2-8-0-debuginfo - update to 10.31-150000.3.12.1
libpcre2-8-0 - update to 10.31-150000.3.12.1
libpcre2-32-0-debuginfo - update to 10.31-150000.3.12.1
libpcre2-32-0 - update to 10.31-150000.3.12.1
libpcre2-16-0-debuginfo - update to 10.31-150000.3.12.1
libpcre2-16-0 - update to 10.31-150000.3.12.1
pcre2 (Red Hat package) - update to 10.32-2.el8
pcre2 - update to 10.33-3
pcre2-debuginfo - update to 10.33-3
pcre2-debugsource - update to 10.33-3
pcre2-devel - update to 10.33-3
pcre2-help - update to 10.33-3
mingw-pcre2 - update to 10.33-3.fc31

• https://bugs.exim.org/show_bug.cgi?id=2421
• https://bugs.php.net/bug.php?id=78338
• https://bugzilla.redhat.com/show_bug.cgi?id=1735494
• https://security.gentoo.org/glsa/202006-16
• https://vcs.pcre.org/pcre2?view=revision&revision=1092

• Denial of service in PCRE2
• Gentoo update for PCRE2
• Red Hat Enterprise Linux 8 update for pcre2
• Multiple vulnerabilities in Red Hat Openshift Serverless
• Multiple vulnerabilities in Red Hat OpenShift Container Storage
• Multiple vulnerabilities in Red Hat Quay
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• Cloud Foundry Foundation cflinuxfs3 update for libpcre
• SUSE update for pcre2
• Multiple vulnerabilities in Red Hat Service Telemetry Framework
• Multiple vulnerabilities in Dell VxRail Appliance components
• Multiple vulnerabilities in Dell PowerStore Family
• Splunk Enterprise update for third-party packages
• openEuler 20.03 LTS update for pcre2
• Red Hat Enterprise Linux 8 update for the php:7.3 module
• Fedora 31 update for mingw-pcre2