Out-of-bounds read in PCRE2 - CVE-2022-1587

Vulnerability identifier: #VU65553

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-1587

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in the get_recurse_data_length() function in pcre2_jit_compile.c when handling recursions in JIT-compiled regular expressions. A remote attacker can pass specially crafted input to the affected application, trigger an out-of-bounds read error and read contents of memory on the system.

PCRE2
Dell EMC PowerProtect Data Protection
Dell Data Protection Central
Oracle Business Intelligence Enterprise Edition
IBM Aspera Shares
PowerStore T
PowerStore X
IBM Aspera Console
EMC ECS
Amazon Linux AMI
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
Red Hat Enterprise Linux for IBM z Systems
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian
Oracle Linux
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
openSUSE Leap
openEuler
Ubuntu
Fedora
Data Lakehouse
Dell Secure Connect Gateway
IBM Aspera Orchestrator
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libpcre2-16-0
libpcre2-16-0-debuginfo
libpcre2-32-0
libpcre2-32-0-debuginfo
libpcre2-8-0
libpcre2-8-0-debuginfo
libpcre2-posix2
libpcre2-posix2-debuginfo
pcre2-debugsource
pcre2-devel
pcre2-devel-static
pcre2-tools
pcre2-tools-debuginfo
libpcre2-16-0-32bit
libpcre2-16-0-32bit-debuginfo
libpcre2-32-0-32bit
libpcre2-32-0-32bit-debuginfo
libpcre2-8-0-32bit
libpcre2-8-0-32bit-debuginfo
libpcre2-posix2-32bit
libpcre2-posix2-32bit-debuginfo
pcre2-doc
libpcre2-posix2 (Ubuntu package)
pcre2-utils (Ubuntu package)
libpcre2-32-0 (Ubuntu package)
libpcre2-16-0 (Ubuntu package)
libpcre2-8-0 (Ubuntu package)
pcre2-help
pcre2-debuginfo
pcre2
pcre2 (Red Hat package)
libpcre2-posix3 (Ubuntu package)
mingw-pcre2
Oracle Database Server
Dell EMC Storage Monitoring and Reporting (SMR)
OpenShift Data Foundation (formerly OpenShift Container Storage)
Red Hat OpenShift Container Platform
Dell EMC VxRail Appliance

Install updates from vendor's website.

PCRE2 - update to 10.40
Data Lakehouse - update to 1.1.0.0
Dell Secure Connect Gateway - update to 5.14.00.10
IBM Aspera Shares - update to 1.10.0 PL4
PowerStore T - update to 3.2.1.0-1989710
PowerStore X - update to 3.2.1.0-1989710
IBM Aspera Console - update to 3.4.2 PL 10
EMC ECS - update to 3.8.0.2
IBM Aspera Orchestrator - update to 4.0.1.2b9681
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.8.0.0
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.13.0
Red Hat OpenShift Container Platform - update to 4.13.0
Dell EMC VxRail Appliance - update to 8.0.000
libpcre2-16-0 - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-16-0-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-32-0 - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-32-0-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-8-0 - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-8-0-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-posix2 - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-posix2-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
pcre2-debugsource - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
pcre2-devel - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
pcre2-devel-static - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
pcre2-tools - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
pcre2-tools-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.34-1.10.1, 10.39-150400.4.6.1
libpcre2-16-0-32bit - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
libpcre2-16-0-32bit-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
libpcre2-32-0-32bit - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
libpcre2-32-0-32bit-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
libpcre2-8-0-32bit - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
libpcre2-8-0-32bit-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
libpcre2-posix2-32bit - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
libpcre2-posix2-32bit-debuginfo - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
pcre2-doc - addressed in versions 10.31-150000.3.12.1, 10.39-150400.4.6.1
libpcre2-posix2 (Ubuntu package) - update to 10.34-7ubuntu0.1
pcre2-utils (Ubuntu package) - addressed in versions 10.34-7ubuntu0.1, 10.39-3ubuntu0.1
libpcre2-32-0 (Ubuntu package) - addressed in versions 10.34-7ubuntu0.1, 10.39-3ubuntu0.1
libpcre2-16-0 (Ubuntu package) - addressed in versions 10.34-7ubuntu0.1, 10.39-3ubuntu0.1
libpcre2-8-0 (Ubuntu package) - addressed in versions 10.34-7ubuntu0.1, 10.39-3ubuntu0.1
pcre2-help - update to 10.35-2
pcre2-debuginfo - update to 10.35-2
pcre2-debugsource - update to 10.35-2
pcre2-devel - update to 10.35-2
pcre2 - update to 10.35-2
pcre2 (Red Hat package) - update to 10.37-5.el9_0
libpcre2-posix3 (Ubuntu package) - update to 10.39-3ubuntu0.1
pcre2 - update to 10.40-1
pcre2 - addressed in versions 10.40-1.fc35, 10.40-1.fc36
mingw-pcre2 - addressed in versions 10.40-1.fc35, 10.40-1.fc36

• https://github.com/PCRE2Project/pcre2/commit/03654e751e7f0700693526b67dfcadda6b42c9d0
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M2GLQQUEY5VFM57CFYXVIFOXN2HUZPDM/
• https://bugzilla.redhat.com/show_bug.cgi?id=2077983,
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KAX7767BCUFC7JMDGP7GOQ5GIZCAUGBB/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DWNG2NS3GINO6LQYUVC4BZLUQPJ3DYHA/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JXINO3KKI5DICQ45E2FKD6MKVMGJLEKJ/

• Out-of-bounds read in PCRE2
• Multiple vulnerabilities in Oracle Linux
• SUSE update for pcre2
• SUSE update for pcre2
• SUSE update for pcre2
• Ubuntu update for pcre2
• Multiple vulnerabilities in Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Oracle Database Server
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell EMC Data Protection Central
• Multiple vulnerabilities in Dell VxRail Appliance components
• Red Hat Enterprise Linux 9 update for pcre2
• Out-of-bounds read in IBM Aspera Orchestrator
• Multiple vulnerabilities in Oracle Business Intelligence Enterprise Edition
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• Multiple vulnerabilities in Dell ECS
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.13
• Multiple vulnerabilities in Dell PowerStore Family
• openEuler update for pcre2
• Multiple vulnerabilities in IBM Aspera Console
• Multiple vulnerabilities in Dell Data Lakehouse System Software
• Amazon Linux AMI update for pcre2
• Multiple vulnerabilities in IBM Aspera Shares
• Fedora 36 update for pcre2
• Fedora 35 update for pcre2
• Fedora 35 update for mingw-pcre2
• Fedora 36 update for mingw-pcre2