Integer overflow in PCRE - CVE-2020-14155

Vulnerability identifier: #VU29488

CSH Severity: High

CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-14155

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow. A remote attacker can pass a large number after a (?C substring, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

PCRE
jbcs-httpd24-openssl-pkcs11 (Red Hat package)
jbcs-httpd24-openssl-chil (Red Hat package)
jbcs-httpd24-apr-util (Red Hat package)
jbcs-httpd24-apr (Red Hat package)
jbcs-httpd24-mod_http2 (Red Hat package)
jbcs-httpd24-nghttp2 (Red Hat package)
jbcs-httpd24-mod_md (Red Hat package)
jbcs-httpd24-httpd (Red Hat package)
jbcs-httpd24-mod_security (Red Hat package)
jbcs-httpd24-curl (Red Hat package)
pcre (Alpine package)
libpcre3 (Ubuntu package)
pcre (Red Hat package)
pcre-debugsource
libpcreposix0-debuginfo
libpcreposix0
libpcrecpp0-debuginfo
libpcrecpp0
libpcre16-0-debuginfo
pcre-devel
libpcrecpp0-32bit
libpcrecpp0-debuginfo-32bit
pcre-devel-static
pcre-tools
pcre-tools-debuginfo
libpcre1-debuginfo
libpcre1-debuginfo-32bit
libpcre1
libpcre1-32bit
libpcre16-0
libpcrecpp0-32bit-debuginfo
libpcre1-32bit-debuginfo
selinux-policy
selinux-policy-devel
selinux-policy-minimum
TensorFlow
IBM Operations Analytics Predictive Insights
Ansible Automation Platform
IBM Security Guardium Key Lifecycle Manager (GKLM)
Dell Secure Connect Gateway
IBM Intelligent Operations Center
WebSphere Remote Server
IBM Security Verify Governance
Oracle HTTP Server
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Advanced Cluster Security for Kubernetes
IBM Tivoli Business Service Manager
IBM Cloud Application Performance Management (APM)
Red Hat OpenStack
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
Cloud Pak for Security (CP4S)
Oracle Communications Cloud Native Core Policy
JBoss Core Services
SUSE MicroOS
HPE Helion Openstack
SUSE OpenStack Cloud Crowbar
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
SUSE OpenStack Cloud
macOS
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Workstation Extension
Ubuntu
SUSE Linux Enterprise Module for Basesystem
Db2 Big SQL
IBM OpenPages with Watson
dashDB Local
cflinuxfs3
Storage Protect Server
Splunk Enterprise
Red Hat OpenShift Serverless
OpenShift Virtualization
IBM Cloud Pak System
IBM DB2 LUW

Install updates from vendor's website.

PCRE - update to 8.44
jbcs-httpd24-openssl-pkcs11 (Red Hat package) - addressed in versions 0.4.10-22.el8jbcs, 0.4.10-22.jbcs.el7
TensorFlow - addressed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2
jbcs-httpd24-openssl-chil (Red Hat package) - addressed in versions 1.0.0-7.el8jbcs, 1.0.0-7.jbcs.el7
jbcs-httpd24-apr-util (Red Hat package) - addressed in versions 1.6.1-84.el8jbcs, 1.6.1-84.jbcs.el7
jbcs-httpd24-apr (Red Hat package) - addressed in versions 1.6.3-107.el8jbcs, 1.6.3-107.jbcs.el7
Migration Toolkit for Containers - addressed in versions 1.5.4, 1.7.3, 1.7.4
Cloud Pak for Security (CP4S) - update to 1.10.7.0
jbcs-httpd24-mod_http2 (Red Hat package) - addressed in versions 1.15.7-21.el8jbcs, 1.15.7-21.jbcs.el7
jbcs-httpd24-nghttp2 (Red Hat package) - addressed in versions 1.39.2-39.el8jbcs, 1.39.2-39.jbcs.el7
jbcs-httpd24-mod_md (Red Hat package) - addressed in versions 2.0.8-40.el8jbcs, 2.0.8-40.jbcs.el7
JBoss Core Services - update to 2.4.37 SP10
jbcs-httpd24-httpd (Red Hat package) - addressed in versions 2.4.37-78.el8jbcs, 2.4.37-78.jbcs.el7
jbcs-httpd24-mod_security (Red Hat package) - addressed in versions 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7
Red Hat OpenShift Container Platform - addressed in versions 4.11.0, 4.11.45
Dell Secure Connect Gateway - update to 5.12.00.10
Db2 Big SQL - update to 7.6.2
jbcs-httpd24-curl (Red Hat package) - addressed in versions 7.78.0-2.el8jbcs, 7.78.0-2.jbcs.el7
Splunk Enterprise - addressed in versions 8.2.12, 9.0.6, 9.1.1
macOS - update to 11.2 20D64
dashDB Local - update to 11.5.9.0
cflinuxfs3 - update to 0.299.0
Red Hat OpenShift Serverless - update to 1.20.0
Red Hat Advanced Cluster Management for Kubernetes - update to 2.2.10
IBM Cloud Pak System - addressed in versions 2.3.4.1, 2.3.5.0
Red Hat Advanced Cluster Security for Kubernetes - update to 3.67
OpenShift Virtualization - update to 4.11.0
IBM Tivoli Business Service Manager - update to 6.2.0.5.4
IBM Cloud Application Performance Management (APM) - update to 8.1.4.0.15
Storage Protect Server - update to 8.1.22
libpcre3 (Ubuntu package) - addressed in versions 2:8.39-9ubuntu0.1, 2:8.39-12ubuntu0.1, 2:8.39-13ubuntu0.21.10.1, 2:8.39-13ubuntu0.22.04.1
pcre (Red Hat package) - update to 8.42-6.el8
pcre-debugsource - addressed in versions 8.45-8.7.1, 8.45-20.10.1
libpcreposix0-debuginfo - addressed in versions 8.45-8.7.1, 8.45-20.10.1
libpcreposix0 - addressed in versions 8.45-8.7.1, 8.45-20.10.1
libpcrecpp0-debuginfo - addressed in versions 8.45-8.7.1, 8.45-20.10.1
libpcrecpp0 - addressed in versions 8.45-8.7.1, 8.45-20.10.1
libpcre16-0-debuginfo - addressed in versions 8.45-8.7.1, 8.45-20.10.1
pcre-devel - addressed in versions 8.45-8.7.1, 8.45-20.10.1
libpcrecpp0-32bit - addressed in versions 8.45-8.7.1, 8.45-20.10.1
libpcrecpp0-debuginfo-32bit - update to 8.45-8.7.1
pcre-devel-static - update to 8.45-8.7.1
pcre-tools - addressed in versions 8.45-8.7.1, 8.45-20.10.1
pcre-tools-debuginfo - addressed in versions 8.45-8.7.1, 8.45-20.10.1
libpcre1-debuginfo - addressed in versions 8.45-8.7.1, 8.45-20.10.1
libpcre1-debuginfo-32bit - update to 8.45-8.7.1
libpcre1 - addressed in versions 8.45-8.7.1, 8.45-20.10.1
libpcre1-32bit - addressed in versions 8.45-8.7.1, 8.45-20.10.1
libpcre16-0 - addressed in versions 8.45-8.7.1, 8.45-20.10.1
libpcrecpp0-32bit-debuginfo - update to 8.45-20.10.1
libpcre1-32bit-debuginfo - update to 8.45-20.10.1
IBM DB2 LUW - addressed in versions 10.5 FP11, 11.1.4 FP7, 11.5.0, 11.5.8
Red Hat OpenStack - update to 16.2
selinux-policy - update to 20140730-36.5.2
selinux-policy-devel - update to 20140730-36.5.2
selinux-policy-minimum - update to 20140730-36.5.2

• https://bugs.gentoo.org/717920
• https://www.pcre.org/original/changelog.txt

• Integer overflow in PCRE
• Integer overflow in pcre (Alpine package)
• Multiple vulnerabilities in TensorFlow
• Multiple vulnerabilities in Apple macOS
• Multiple vulnerabilities in Red Hat JBoss Core Services Apache HTTP Server
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Policy
• Ubuntu update for pcre3
• Cloud Foundry Foundation cflinuxfs3 update for libpcre
• SUSE update for pcre
• Multiple vulnerabilities in DELL Secure Connect Gateway Security
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC)
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC) 1.7
• Multiple vulnerabilities in OpenShift Virtualization
• Multiple vulnerabilities in Oracle HTTP Server
• Red Hat Enterprise Linux 8 update for pcre
• SUSE update for pcre
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Splunk Enterprise update for third-party packages
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• Multiple vulnerabilities in Red Hat Ansible Automation Platform 2.4
• Multiple vulnerabilities in IBM Storage Protect Server
• Multiple vulnerabilities in IBM Application Performance Management
• Multiple vulnerabilities in IBM OpenPages with Watson
• Multiple vulnerabilities in IBM Tivoli Business Service Manager
• Multiple vulnerabilities in IBM Operations Analytics Predictive Insights
• Multiple vulnerabilities in IBM Db2
• Multiple vulnerabilities in IBM Security Guardium Key Lifecycle Manager
• Multiple vulnerabilities in IBM WebSphere Remote Server
• Multiple vulnerabilities in IBM Intelligent Operations Center (IOC)
• Multiple vulnerabilities in IBM Security Verify Governance
• Multiple vulnerabilities in IBM Cloud Pak System
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 3.67
• Multiple vulnerabilities in Red Hat OpenShift Serverless 1.20
• Multiple vulnerabilities in Red Hat OpenStack 16.2 packages
• Multiple vulnerabilities in Migration Toolkit for Containers 1.5
• Multiple vulnerabilities in IBM dashDB Local
• Multiple vulnerabilities in IBM Big SQL on IBM Cloud Pak for Data
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.2