Out-of-bounds read in PCRE2 - CVE-2022-1587

Vulnerability identifier: #VU65553

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-1587

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in the get_recurse_data_length() function in pcre2_jit_compile.c when handling recursions in JIT-compiled regular expressions. A remote attacker can pass specially crafted input to the affected application, trigger an out-of-bounds read error and read contents of memory on the system.

PCRE2
Amazon Linux AMI
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Oracle Linux
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
openSUSE Leap
Ubuntu
openEuler
Fedora
Dell EMC PowerProtect Data Protection
Dell Data Protection Central
Oracle Business Intelligence Enterprise Edition
IBM Aspera Shares
PowerStore X
PowerStore T
IBM Aspera Console
EMC ECS
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libpcre2-8-0 (Ubuntu package)
pcre2-utils (Ubuntu package)
libpcre2-32-0 (Ubuntu package)
libpcre2-posix0 (Ubuntu package)
libpcre2-16-0 (Ubuntu package)
libpcre2-posix2 (Ubuntu package)
libpcre2-posix3 (Ubuntu package)
pcre2-tools
libpcre2-16-0
libpcre2-16-0-debuginfo
libpcre2-32-0
libpcre2-32-0-debuginfo
libpcre2-8-0
libpcre2-8-0-debuginfo
libpcre2-posix2
libpcre2-posix2-debuginfo
pcre2-debugsource
pcre2-devel
pcre2-devel-static
pcre2-tools-debuginfo
libpcre2-16-0-32bit
libpcre2-16-0-32bit-debuginfo
libpcre2-32-0-32bit
libpcre2-32-0-32bit-debuginfo
libpcre2-8-0-32bit
libpcre2-8-0-32bit-debuginfo
libpcre2-posix2-32bit
libpcre2-posix2-32bit-debuginfo
pcre2-doc
pcre2-help
pcre2
pcre2-debuginfo
pcre2 (Red Hat package)
mingw-pcre2
Data Lakehouse
Dell Secure Connect Gateway
IBM Aspera Orchestrator
Oracle Database Server
Dell EMC Storage Monitoring and Reporting (SMR)
OpenShift Data Foundation (formerly OpenShift Container Storage)
Red Hat OpenShift Container Platform
Dell EMC VxRail Appliance

Install updates from vendor's website.

PCRE2 - update to 10.40
Data Lakehouse - update to 1.1.0.0
Dell Secure Connect Gateway - update to 5.14.00.10
libpcre2-8-0 (Ubuntu package) - addressed in versions 10.31-2ubuntu0.1~esm1, 10.34-7ubuntu0.1, 10.39-3ubuntu0.1
pcre2-utils (Ubuntu package) - addressed in versions 10.31-2ubuntu0.1~esm1, 10.34-7ubuntu0.1, 10.39-3ubuntu0.1
libpcre2-32-0 (Ubuntu package) - addressed in versions 10.31-2ubuntu0.1~esm1, 10.34-7ubuntu0.1, 10.39-3ubuntu0.1
libpcre2-posix0 (Ubuntu package) - update to 10.31-2ubuntu0.1~esm1
libpcre2-16-0 (Ubuntu package) - addressed in versions 10.31-2ubuntu0.1~esm1, 10.34-7ubuntu0.1, 10.39-3ubuntu0.1
libpcre2-posix2 (Ubuntu package) - update to 10.34-7ubuntu0.1
libpcre2-posix3 (Ubuntu package) - update to 10.39-3ubuntu0.1
pcre2-tools - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-16-0 - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-16-0-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-32-0 - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-32-0-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-8-0 - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-8-0-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-posix2 - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-posix2-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
pcre2-debugsource - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
pcre2-devel - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
pcre2-devel-static - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
pcre2-tools-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-16-0-32bit - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
libpcre2-16-0-32bit-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
libpcre2-32-0-32bit - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
libpcre2-32-0-32bit-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
libpcre2-8-0-32bit - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
libpcre2-8-0-32bit-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
libpcre2-posix2-32bit - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
libpcre2-posix2-32bit-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
pcre2-doc - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
pcre2-help - update to 10.35-2
pcre2 - update to 10.35-2
pcre2-devel - update to 10.35-2
pcre2-debugsource - update to 10.35-2
pcre2-debuginfo - update to 10.35-2
pcre2 (Red Hat package) - update to 10.37-5.el9_0
pcre2 - update to 10.40-1
mingw-pcre2 - addressed in versions 10.40-1.fc35, 10.40-1.fc36
pcre2 - addressed in versions 10.40-1.fc35, 10.40-1.fc36
IBM Aspera Shares - update to 1.10.0 PL4
PowerStore X - update to 3.2.1.0-1989710
PowerStore T - update to 3.2.1.0-1989710
IBM Aspera Console - update to 3.4.2 PL 10
EMC ECS - update to 3.8.0.2
IBM Aspera Orchestrator - update to 4.0.1.2b9681
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.8.0.0
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.13.0
Red Hat OpenShift Container Platform - update to 4.13.0
Dell EMC VxRail Appliance - update to 8.0.000

• https://github.com/PCRE2Project/pcre2/commit/03654e751e7f0700693526b67dfcadda6b42c9d0
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M2GLQQUEY5VFM57CFYXVIFOXN2HUZPDM/
• https://bugzilla.redhat.com/show_bug.cgi?id=2077983,
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KAX7767BCUFC7JMDGP7GOQ5GIZCAUGBB/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DWNG2NS3GINO6LQYUVC4BZLUQPJ3DYHA/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JXINO3KKI5DICQ45E2FKD6MKVMGJLEKJ/

• Out-of-bounds read in PCRE2
• Multiple vulnerabilities in Oracle Linux
• SUSE update for pcre2
• SUSE update for pcre2
• SUSE update for pcre2
• Ubuntu update for pcre2
• Multiple vulnerabilities in Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Oracle Database Server
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell EMC Data Protection Central
• Multiple vulnerabilities in Dell VxRail Appliance components
• Red Hat Enterprise Linux 9 update for pcre2
• Out-of-bounds read in IBM Aspera Orchestrator
• Multiple vulnerabilities in Oracle Business Intelligence Enterprise Edition
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• Multiple vulnerabilities in Dell ECS
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.13
• Multiple vulnerabilities in Dell PowerStore Family
• openEuler update for pcre2
• Multiple vulnerabilities in IBM Aspera Console
• Multiple vulnerabilities in Dell Data Lakehouse System Software
• Amazon Linux AMI update for pcre2
• Multiple vulnerabilities in IBM Aspera Shares
• Fedora 36 update for pcre2
• Fedora 35 update for pcre2
• Fedora 35 update for mingw-pcre2
• Fedora 36 update for mingw-pcre2
• Ubuntu update for pcre2