CVE-2022-1587
Fixed in a distro release EPSS 3%
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.
Products: pcre2, redhat enterprise_linux, fedoraproject fedora, netapp active_iq_unified_manager, netapp hci_management_node, netapp ontap_select_deploy_administration_utility, netapp solidfire, netapp h300s_firmware, netapp h500s_firmware, netapp h700s_firmware, netapp h410s_firmware, netapp h410c_firmware
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.13 | pcre2 | 10.36-r1 |
| Alpine 3.14 | pcre2 | 10.36-r1 |
| Alpine 3.15 | pcre2 | 10.40-r0 |
| Alpine 3.16 | pcre2 | 10.40-r0 |
| Alpine 3.17 | pcre2 | 10.40-r0 |
| Alpine 3.18 | pcre2 | 10.40-r0 |
| Alpine 3.19 | pcre2 | 10.40-r0 |
| Alpine 3.20 | pcre2 | 10.40-r0 |
| Alpine 3.21 | pcre2 | 10.40-r0 |
| Alpine 3.22 | pcre2 | 10.40-r0 |
| Alpine 3.23 | pcre2 | 10.40-r0 |
| Alpine 3.24 | pcre2 | 10.40-r0 |
| Amazon Linux 2023 | pcre2 | 10.40-1.amzn2023.0.2 |
| Amazon Linux 2023 | pcre2-devel | 10.40-1.amzn2023.0.2 |
| Amazon Linux 2023 | pcre2-static | 10.40-1.amzn2023.0.2 |
| Amazon Linux 2023 | pcre2-syntax | 10.40-1.amzn2023.0.2 |
| Amazon Linux 2023 | pcre2-tools | 10.40-1.amzn2023.0.2 |
| Amazon Linux 2023 | pcre2-utf16 | 10.40-1.amzn2023.0.2 |
| Amazon Linux 2023 | pcre2-utf32 | 10.40-1.amzn2023.0.2 |
| Chainguard | pcre2 | 0 |
| Debian 10 | pcre2 | 10.32-5+deb10u1 |
| Debian 12 | pcre2 | 10.40-1 |
| Debian 13 | pcre2 | 10.40-1 |
| Debian 14 | pcre2 | 10.40-1 |
| Red Hat Enterprise Linux 9 | pcre2 | 0:10.37-5.el9_0 |
| Red Hat Enterprise Linux 9 | pcre2-debuginfo | 0:10.37-5.el9_0 |
| Red Hat Enterprise Linux 9 | pcre2-debugsource | 0:10.37-5.el9_0 |
| Red Hat Enterprise Linux 9 | pcre2-devel | 0:10.37-5.el9_0 |
| Red Hat Enterprise Linux 9 | pcre2-syntax | 0:10.37-5.el9_0 |
| Red Hat Enterprise Linux 9 | pcre2-tools-debuginfo | 0:10.37-5.el9_0 |
| Red Hat Enterprise Linux 9 | pcre2-utf16 | 0:10.37-5.el9_0 |
| Red Hat Enterprise Linux 9 | pcre2-utf16-debuginfo | 0:10.37-5.el9_0 |
| Red Hat Enterprise Linux 9 | pcre2-utf32 | 0:10.37-5.el9_0 |
| Red Hat Enterprise Linux 9 | pcre2-utf32-debuginfo | 0:10.37-5.el9_0 |
| Rocky Linux 9 | pcre2 | 0:10.37-5.el9_0 |
| SUSE Enterprise Storage 6 | pcre2 | 10.31-150000.3.12.1 |
| SUSE Enterprise Storage 7 | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise Micro 5.1 | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise Micro 5.2 | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | pcre2 | 10.39-150400.4.6.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | pcre2 | 10.34-1.10.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | pcre2 | 10.34-1.10.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | pcre2 | 10.34-1.10.1 |
| SUSE Linux Enterprise Server 12 SP5 | pcre2 | 10.34-1.10.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise Server 15-LTSS | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | pcre2 | 10.34-1.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | pcre2 | 10.34-1.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | pcre2 | 10.31-150000.3.12.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | pcre2 | 10.34-1.10.1 |
| SUSE Manager Proxy 4.1 | pcre2 | 10.31-150000.3.12.1 |
| SUSE Manager Retail Branch Server 4.1 | pcre2 | 10.31-150000.3.12.1 |
| SUSE Manager Server 4.1 | pcre2 | 10.31-150000.3.12.1 |
| SUSE OpenStack Cloud 9 | pcre2 | 10.34-1.10.1 |
| SUSE OpenStack Cloud Crowbar 9 | pcre2 | 10.34-1.10.1 |
| Ubuntu 16.04 LTS | pcre2 | no fix |
| Ubuntu 20.04 LTS | pcre2 | 10.34-7ubuntu0.1 |
| Ubuntu 22.04 LTS | pcre2 | 10.39-3ubuntu0.1 |
| Ubuntu Pro 18.04 LTS | pcre2 | 10.31-2ubuntu0.1~esm1 |
| Wolfi | pcre2 | 0 |
| openSUSE Leap 15.3 | pcre2 | 10.31-150000.3.12.1 |
| openSUSE Leap 15.4 | pcre2 | 10.39-150400.4.6.1 |
| openSUSE Leap Micro 5.2 | pcre2 | 10.31-150000.3.12.1 |