Summary
Yunho Kim discovered that PCRE incorrectly handled memory when
handling certain regular expressions. An attacker could possibly use
this issue to cause applications using PCRE to expose sensitive
information. This issue only affects Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS, Ubuntu 21.10 and Ubuntu 22.04 LTS. (CVE-2019-20838)
It was discovered that PCRE incorrectly handled memory when
handling certain regular expressions. An attacker could possibly use
this issue to cause applications using PCRE to have unexpected
behavior. This issue only affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM,
Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-14155)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | pcre3 | 2:8.39-9ubuntu0.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | pcre3 | 2:8.39-12ubuntu0.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | pcre3 | 2:8.39-13ubuntu0.22.04.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | pcre3 | 1:8.31-2ubuntu2.3+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | pcre3 | 2:8.38-3.1ubuntu0.1~esm1 |
Vulnerabilities 2
-
Unscored —
libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than o…
-
Unscored —
libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.