CVE-2022-1586
16.05.2022, 21:15
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.Enginsight
| Vendor | Product | Version |
|---|---|---|
| pcre | pcre2 | 𝑥 < 10.40 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| netapp | active_iq_unified_manager | - |
| netapp | hci_management_node | - |
| netapp | ontap_select_deploy_administration_utility | - |
| netapp | solidfire | - |
| netapp | h300s_firmware | - |
| netapp | h500s_firmware | - |
| netapp | h700s_firmware | - |
| netapp | h410s_firmware | - |
| netapp | h410c_firmware | - |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References