Описание
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.
A flaw was found in PCRE2. On 32-bit platforms, an integer overflow in the pcre2_compile_32 function can lead to an out-of-bounds write. This vulnerability could allow a remote attacker to achieve a high integrity impact and a low availability impact, potentially leading to data corruption or denial of service.
Отчет
A Moderate impact flaw was found in PCRE2 affecting 32-bit platforms, where an integer overflow in the pcre2_compile_32 function can lead to an out-of-bounds write. While exploitable over the network without requiring user interaction or privileges, the high attack complexity reduces its overall severity. Successful exploitation could result in high integrity impact, such as data corruption, or a low availability impact, leading to a denial of service.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | bootc | Fix deferred | ||
| Red Hat Enterprise Linux 10 | mariadb10.11 | Fix deferred | ||
| Red Hat Enterprise Linux 10 | mariadb11.8 | Fix deferred | ||
| Red Hat Enterprise Linux 10 | mingw-pcre2 | Fix deferred | ||
| Red Hat Enterprise Linux 10 | pcre2 | Affected | ||
| Red Hat Enterprise Linux 7 | pcre2 | Fix deferred | ||
| Red Hat Enterprise Linux 8 | mariadb:10.11/mariadb | Fix deferred | ||
| Red Hat Enterprise Linux 8 | pcre2 | Affected | ||
| Red Hat Enterprise Linux 9 | bootc | Fix deferred | ||
| Red Hat Enterprise Linux 9 | mariadb:10.11/mariadb | Fix deferred |
Показывать по
Дополнительная информация
Статус:
6.5 Medium
CVSS3
Связанные уязвимости
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 intege ...
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.
6.5 Medium
CVSS3