Every CVE Search/ Get API key

CVE-2019-20454

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and...

5.1 MediumFix available

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.56%Up 0.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 5.1

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.

Record
CVE-2019-20454
CVSS 3.0
5.1 MediumCVSS:3.0/AC:H/AV:L/A:H/C:N/I:N/PR:N/S:U/UI:N
Updated
2026-11-02
EUVDEUVD-2019-11000 5.1

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.

Record
EUVD-2019-11000
CVSS 3.0
5.1 MediumCVSS:3.0/AC:H/AV:L/A:H/C:N/I:N/PR:N/S:U/UI:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-6wcm-vmc4-h93p 7.5

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and...

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.

Record
GHSA-6wcm-vmc4-h93p
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
NVD 7.5

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.

Record
CVE-2019-20454
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0
5.1 MediumCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-125
Updated
2026-11-02
OSVBELL-CVE-2019-20454 7.5

CVE-2019-20454 does not affect BellSoft software

Record
BELL-CVE-2019-20454
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.5

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.

Record
CVE-2019-20454
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-04
Show 11 moreShow less
OSVDEBIAN-CVE-2019-20454 7.5

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.

Record
DEBIAN-CVE-2019-20454
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVRHSA-2020:3662 8.8

Red Hat Security Advisory: php:7.3 security, bug fix, and enhancement update

Record
RHSA-2020:3662
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:4539 7.5

Red Hat Security Advisory: pcre2 security and enhancement update

Record
RHSA-2020:4539
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2020:3662 8.8

Moderate: php:7.3 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (7.3.20). (BZ#1856655)

Security Fix(es):

  • php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)

  • php: Buffer over-read in exif_read_data() (CVE-2019-11040)

  • php: DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte (CVE-2019-11045)

  • php: Information disclosure in exif_read_data() (CVE-2019-11047)

  • php: Integer wraparounds when receiving multipart forms (CVE-2019-11048)

  • oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)

  • oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)

  • oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)

  • oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)

  • oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204)

  • pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode (CVE-2019-20454)

  • php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059)

  • php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060)

  • php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062)

  • php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)

  • php: Information disclosure in exif_read_data() function (CVE-2020-7064)

  • php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution (CVE-2020-7065)

  • php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)

  • php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)

  • php: Out of bounds read when parsing EXIF information (CVE-2019-11050)

  • oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246)

  • php: Information disclosure in function get_headers (CVE-2020-7066)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2020:3662
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2020:4539 7.5

Moderate: pcre2 security and enhancement update

The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl.

Security Fix(es):

  • pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode (CVE-2019-20454)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

Record
RLSA-2020:4539
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-20454 7.5

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.

Record
UBUNTU-CVE-2019-20454
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0
5.1 MediumCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVALSA-2020:3662 No score

Moderate: php:7.3 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (7.3.20). (BZ#1856655)

Security Fix(es):

  • php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)

  • php: Buffer over-read in exif_read_data() (CVE-2019-11040)

  • php: DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte (CVE-2019-11045)

  • php: Information disclosure in exif_read_data() (CVE-2019-11047)

  • php: Integer wraparounds when receiving multipart forms (CVE-2019-11048)

  • oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)

  • oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)

  • oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)

  • oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)

  • oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204)

  • pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode (CVE-2019-20454)

  • php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059)

  • php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060)

  • php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062)

  • php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)

  • php: Information disclosure in exif_read_data() function (CVE-2020-7064)

  • php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution (CVE-2020-7065)

  • php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)

  • php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)

  • php: Out of bounds read when parsing EXIF information (CVE-2019-11050)

  • oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246)

  • php: Information disclosure in function get_headers (CVE-2020-7066)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2020:3662
Updated
2026-11-02
OSVALSA-2020:4539 No score

Moderate: pcre2 security and enhancement update

The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl.

Security Fix(es):

  • pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode (CVE-2019-20454)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2020:4539
Updated
2026-11-02
OSVMGASA-2020-0305 No score

Updated pcre2 packages fix security vulnerability

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c. (CVE-2019-20454)

Record
MGASA-2020-0305
Updated
2026-11-02
OSVopenSUSE-SU-2022:2649-1 No score

Security update for pcre2

This update for pcre2 fixes the following issues:

  • CVE-2019-20454: Fixed out-of-bounds read in JIT mode when \X is used in non-UTF mode (bsc#1164384).
  • CVE-2022-1587: Fixed out-of-bounds read due to bug in recursions (bsc#1199235).
Record
openSUSE-SU-2022:2649-1
Updated
2026-11-02
OSVSUSE-SU-2022:2649-1 No score

Security update for pcre2

This update for pcre2 fixes the following issues:

  • CVE-2019-20454: Fixed out-of-bounds read in JIT mode when \X is used in non-UTF mode (bsc#1164384).
  • CVE-2022-1587: Fixed out-of-bounds read due to bug in recursions (bsc#1199235).
Record
SUSE-SU-2022:2649-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
apcu-panel
AlmaLinux:8
From an advisory covering 22 CVEs
 before 5.1.17-1.module_el8.3.0+2009+b272fdef
5.1.17-1.module_el8.3.0+2009+b272fdef
libzip
AlmaLinux:8
From an advisory covering 22 CVEs
 before 1.5.2-1.module_el8.5.0+152+112d3b8c
1.5.2-1.module_el8.5.0+152+112d3b8c
libzip
AlmaLinux:8
From an advisory covering 22 CVEs
 before 1.5.2-1.module_el8.3.0+2009+b272fdef
1.5.2-1.module_el8.3.0+2009+b272fdef
libzip
AlmaLinux:8
From an advisory covering 22 CVEs
 before 1.5.2-1.module_el8.4.0+2229+b272fdef
1.5.2-1.module_el8.4.0+2229+b272fdef
libzip-devel
AlmaLinux:8
From an advisory covering 22 CVEs
 before 1.5.2-1.module_el8.4.0+2229+b272fdef
1.5.2-1.module_el8.4.0+2229+b272fdef
libzip-devel
AlmaLinux:8
From an advisory covering 22 CVEs
 before 1.5.2-1.module_el8.3.0+2009+b272fdef
1.5.2-1.module_el8.3.0+2009+b272fdef
libzip-devel
AlmaLinux:8
From an advisory covering 22 CVEs
 before 1.5.2-1.module_el8.5.0+152+112d3b8c
1.5.2-1.module_el8.5.0+152+112d3b8c
libzip-tools
AlmaLinux:8
From an advisory covering 22 CVEs
 before 1.5.2-1.module_el8.5.0+152+112d3b8c
1.5.2-1.module_el8.5.0+152+112d3b8c
libzip-tools
AlmaLinux:8
From an advisory covering 22 CVEs
 before 1.5.2-1.module_el8.4.0+2229+b272fdef
1.5.2-1.module_el8.4.0+2229+b272fdef
libzip-tools
AlmaLinux:8
From an advisory covering 22 CVEs
 before 1.5.2-1.module_el8.3.0+2009+b272fdef
1.5.2-1.module_el8.3.0+2009+b272fdef
Show 230 moreShow less
Affected packages
PackageAffectedFixed
php
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-bcmath
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-bcmath
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-bcmath
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-cli
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-cli
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-cli
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-common
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-common
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-common
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-dba
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-dba
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-dba
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-dbg
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-dbg
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-dbg
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-devel
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-devel
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-devel
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-embedded
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-embedded
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-embedded
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-enchant
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-enchant
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-enchant
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-fpm
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-fpm
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-fpm
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-gd
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-gd
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-gd
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-gmp
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-gmp
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-gmp
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-intl
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-intl
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-intl
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-json
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-json
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-json
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-ldap
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-ldap
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-ldap
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-mbstring
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-mbstring
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-mbstring
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-mysqlnd
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-mysqlnd
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-mysqlnd
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-odbc
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-odbc
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-odbc
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-opcache
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-opcache
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-opcache
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-pdo
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-pdo
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-pdo
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-pear
AlmaLinux:8
From an advisory covering 22 CVEs
 before 1:1.10.9-1.module_el8.3.0+2009+b272fdef
1:1.10.9-1.module_el8.3.0+2009+b272fdef
php-pecl-apcu
AlmaLinux:8
From an advisory covering 22 CVEs
 before 5.1.17-1.module_el8.5.0+152+112d3b8c
5.1.17-1.module_el8.5.0+152+112d3b8c
php-pecl-apcu
AlmaLinux:8
From an advisory covering 22 CVEs
 before 5.1.17-1.module_el8.3.0+2009+b272fdef
5.1.17-1.module_el8.3.0+2009+b272fdef
php-pecl-apcu
AlmaLinux:8
From an advisory covering 22 CVEs
 before 5.1.17-1.module_el8.4.0+2229+b272fdef
5.1.17-1.module_el8.4.0+2229+b272fdef
php-pecl-apcu-devel
AlmaLinux:8
From an advisory covering 22 CVEs
 before 5.1.17-1.module_el8.3.0+2009+b272fdef
5.1.17-1.module_el8.3.0+2009+b272fdef
php-pecl-apcu-devel
AlmaLinux:8
From an advisory covering 22 CVEs
 before 5.1.17-1.module_el8.4.0+2229+b272fdef
5.1.17-1.module_el8.4.0+2229+b272fdef
php-pecl-apcu-devel
AlmaLinux:8
From an advisory covering 22 CVEs
 before 5.1.17-1.module_el8.5.0+152+112d3b8c
5.1.17-1.module_el8.5.0+152+112d3b8c
php-pecl-rrd
AlmaLinux:8
From an advisory covering 22 CVEs
 before 2.0.1-1.module_el8.6.0+2750+78feabcb
2.0.1-1.module_el8.6.0+2750+78feabcb
php-pecl-rrd
AlmaLinux:8
From an advisory covering 22 CVEs
 before 2.0.1-1.module_el8.4.0+2229+b272fdef
2.0.1-1.module_el8.4.0+2229+b272fdef
php-pecl-rrd
AlmaLinux:8
From an advisory covering 22 CVEs
 before 2.0.1-1.module_el8.3.0+2009+b272fdef
2.0.1-1.module_el8.3.0+2009+b272fdef
php-pecl-xdebug
AlmaLinux:8
From an advisory covering 22 CVEs
 before 2.8.0-1.module_el8.5.0+152+112d3b8c
2.8.0-1.module_el8.5.0+152+112d3b8c
php-pecl-xdebug
AlmaLinux:8
From an advisory covering 22 CVEs
 before 2.8.0-1.module_el8.3.0+2009+b272fdef
2.8.0-1.module_el8.3.0+2009+b272fdef
php-pecl-xdebug
AlmaLinux:8
From an advisory covering 22 CVEs
 before 2.8.0-1.module_el8.4.0+2229+b272fdef
2.8.0-1.module_el8.4.0+2229+b272fdef
php-pecl-zip
AlmaLinux:8
From an advisory covering 22 CVEs
 before 1.15.4-1.module_el8.4.0+2229+b272fdef
1.15.4-1.module_el8.4.0+2229+b272fdef
php-pecl-zip
AlmaLinux:8
From an advisory covering 22 CVEs
 before 1.15.4-1.module_el8.5.0+152+112d3b8c
1.15.4-1.module_el8.5.0+152+112d3b8c
php-pecl-zip
AlmaLinux:8
From an advisory covering 22 CVEs
 before 1.15.4-1.module_el8.3.0+2009+b272fdef
1.15.4-1.module_el8.3.0+2009+b272fdef
php-pgsql
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-pgsql
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-pgsql
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-process
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-process
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-process
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-recode
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-recode
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-recode
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-snmp
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-snmp
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-snmp
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-soap
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-soap
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-soap
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-xml
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
php-xml
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-xml
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-xmlrpc
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.5.0+152+112d3b8c
7.3.20-1.module_el8.5.0+152+112d3b8c
php-xmlrpc
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.3.0+2009+b272fdef
7.3.20-1.module_el8.3.0+2009+b272fdef
php-xmlrpc
AlmaLinux:8
From an advisory covering 22 CVEs
 before 7.3.20-1.module_el8.4.0+2229+b272fdef
7.3.20-1.module_el8.4.0+2229+b272fdef
pcre2
AlmaLinux:8
 before 10.32-2.el8
10.32-2.el8
pcre2-devel
AlmaLinux:8
 before 10.32-2.el8
10.32-2.el8
pcre2-tools
AlmaLinux:8
 before 10.32-2.el8
10.32-2.el8
pcre2-utf16
AlmaLinux:8
 before 10.32-2.el8
10.32-2.el8
pcre2-utf32
AlmaLinux:8
 before 10.32-2.el8
10.32-2.el8
pcre2
Debian:12
 before 10.34-1
10.34-1
pcre2
Debian:13
 before 10.34-1
10.34-1
pcre2
Debian:14
 before 10.34-1
10.34-1
pcre2
Debian:10
From an advisory covering 3 CVEs
 before 10.32-5+deb10u1, plus listed versions
10.32-5
10.32-5+deb10u1
pcre2
Mageia:7
 before 10.33-1.2.mga7
10.33-1.2.mga7
apcu-panel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:5.1.17-1.module+el8.1.0+3189+a1bff096
0:5.1.17-1.module+el8.1.0+3189+a1bff096
libzip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:1.5.2-1.module+el8.1.0+3189+a1bff096
0:1.5.2-1.module+el8.1.0+3189+a1bff096
libzip-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:1.5.2-1.module+el8.1.0+3189+a1bff096
0:1.5.2-1.module+el8.1.0+3189+a1bff096
libzip-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:1.5.2-1.module+el8.1.0+3189+a1bff096
0:1.5.2-1.module+el8.1.0+3189+a1bff096
libzip-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:1.5.2-1.module+el8.1.0+3189+a1bff096
0:1.5.2-1.module+el8.1.0+3189+a1bff096
libzip-tools
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:1.5.2-1.module+el8.1.0+3189+a1bff096
0:1.5.2-1.module+el8.1.0+3189+a1bff096
libzip-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:1.5.2-1.module+el8.1.0+3189+a1bff096
0:1.5.2-1.module+el8.1.0+3189+a1bff096
php
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-bcmath
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-bcmath-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-cli
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-cli-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-common-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-dba
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-dba-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-dbg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-dbg-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-embedded
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-embedded-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-enchant
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-enchant-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-fpm
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-fpm-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-gd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-gd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-gmp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-gmp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-intl
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-intl-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-json
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-json-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-ldap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-mbstring
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-mbstring-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-mysqlnd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-mysqlnd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-odbc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-odbc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-opcache
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-opcache-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-pdo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-pdo-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-pear
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 1:1.10.9-1.module+el8.1.0+3189+a1bff096
1:1.10.9-1.module+el8.1.0+3189+a1bff096
php-pecl-apcu
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:5.1.17-1.module+el8.1.0+3189+a1bff096
0:5.1.17-1.module+el8.1.0+3189+a1bff096
php-pecl-apcu-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:5.1.17-1.module+el8.1.0+3189+a1bff096
0:5.1.17-1.module+el8.1.0+3189+a1bff096
php-pecl-apcu-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:5.1.17-1.module+el8.1.0+3189+a1bff096
0:5.1.17-1.module+el8.1.0+3189+a1bff096
php-pecl-apcu-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:5.1.17-1.module+el8.1.0+3189+a1bff096
0:5.1.17-1.module+el8.1.0+3189+a1bff096
php-pecl-rrd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:2.0.1-1.module+el8.2.0+4968+1d5097db
0:2.0.1-1.module+el8.2.0+4968+1d5097db
php-pecl-rrd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:2.0.1-1.module+el8.2.0+4968+1d5097db
0:2.0.1-1.module+el8.2.0+4968+1d5097db
php-pecl-rrd-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:2.0.1-1.module+el8.2.0+4968+1d5097db
0:2.0.1-1.module+el8.2.0+4968+1d5097db
php-pecl-xdebug
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:2.8.0-1.module+el8.2.0+4968+1d5097db
0:2.8.0-1.module+el8.2.0+4968+1d5097db
php-pecl-xdebug-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:2.8.0-1.module+el8.2.0+4968+1d5097db
0:2.8.0-1.module+el8.2.0+4968+1d5097db
php-pecl-xdebug-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:2.8.0-1.module+el8.2.0+4968+1d5097db
0:2.8.0-1.module+el8.2.0+4968+1d5097db
php-pecl-zip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:1.15.4-1.module+el8.1.0+3189+a1bff096
0:1.15.4-1.module+el8.1.0+3189+a1bff096
php-pecl-zip-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:1.15.4-1.module+el8.1.0+3189+a1bff096
0:1.15.4-1.module+el8.1.0+3189+a1bff096
php-pecl-zip-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:1.15.4-1.module+el8.1.0+3189+a1bff096
0:1.15.4-1.module+el8.1.0+3189+a1bff096
php-pgsql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-pgsql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-process
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-process-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-recode
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-recode-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-snmp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-snmp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-soap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-soap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-xml
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-xml-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-xmlrpc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
php-xmlrpc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.2.0+7373+b272fdef
0:7.3.20-1.module+el8.2.0+7373+b272fdef
pcre2
Red Hat:enterprise_linux:8::baseos
 before 0:10.32-2.el8
0:10.32-2.el8
pcre2-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:10.32-2.el8
0:10.32-2.el8
pcre2-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:10.32-2.el8
0:10.32-2.el8
pcre2-devel
Red Hat:enterprise_linux:8::baseos
 before 0:10.32-2.el8
0:10.32-2.el8
pcre2-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:10.32-2.el8
0:10.32-2.el8
pcre2-utf16
Red Hat:enterprise_linux:8::baseos
 before 0:10.32-2.el8
0:10.32-2.el8
pcre2-utf16-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:10.32-2.el8
0:10.32-2.el8
pcre2-utf32
Red Hat:enterprise_linux:8::baseos
 before 0:10.32-2.el8
0:10.32-2.el8
pcre2-utf32-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:10.32-2.el8
0:10.32-2.el8
pcre2-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:10.32-2.el8
0:10.32-2.el8
pcre2-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:10.32-2.el8
0:10.32-2.el8
pcre2-tools
Red Hat:enterprise_linux:8::crb
 before 0:10.32-2.el8
0:10.32-2.el8
pcre2-tools-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:10.32-2.el8
0:10.32-2.el8
pcre2-utf16-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:10.32-2.el8
0:10.32-2.el8
pcre2-utf32-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:10.32-2.el8
0:10.32-2.el8
libzip
Rocky Linux:8
From an advisory covering 22 CVEs
 before 0:1.5.2-1.module+el8.4.0+414+2e7afcdd
0:1.5.2-1.module+el8.4.0+414+2e7afcdd
php
Rocky Linux:8
From an advisory covering 22 CVEs
 before 0:7.3.20-1.module+el8.4.0+414+2e7afcdd
0:7.3.20-1.module+el8.4.0+414+2e7afcdd
php-pear
Rocky Linux:8
From an advisory covering 22 CVEs
 before 1:1.10.9-1.module+el8.4.0+414+2e7afcdd
1:1.10.9-1.module+el8.4.0+414+2e7afcdd
php-pecl-apcu
Rocky Linux:8
From an advisory covering 22 CVEs
 before 0:5.1.17-1.module+el8.4.0+414+2e7afcdd
0:5.1.17-1.module+el8.4.0+414+2e7afcdd
php-pecl-rrd
Rocky Linux:8
From an advisory covering 22 CVEs
 before 0:2.0.1-1.module+el8.4.0+414+2e7afcdd
0:2.0.1-1.module+el8.4.0+414+2e7afcdd
php-pecl-xdebug
Rocky Linux:8
From an advisory covering 22 CVEs
 before 0:2.8.0-1.module+el8.4.0+414+2e7afcdd
0:2.8.0-1.module+el8.4.0+414+2e7afcdd
php-pecl-zip
Rocky Linux:8
From an advisory covering 22 CVEs
 before 0:1.15.4-1.module+el8.4.0+414+2e7afcdd
0:1.15.4-1.module+el8.4.0+414+2e7afcdd
pcre2
Rocky Linux:8
 before 0:10.32-2.el8
0:10.32-2.el8
pcre2
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Linux Enterprise Server 15 SP2-BCL
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Manager Proxy 4.1
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Manager Retail Branch Server 4.1
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Manager Server 4.1
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Enterprise Storage 6
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
SUSE:Enterprise Storage 7
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1
pcre2
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
10.22-310.22-410.22-510.22-610.31-210.31-2ubuntu0.1~esm110.31-2ubuntu0.1~esm2
 None known
pcre2
openSUSE:Leap Micro 5.2
From an advisory covering 2 CVEs
 before 10.31-150000.3.12.1
10.31-150000.3.12.1

History

History
RecordedChangedSources
affectedOSV
affected, factsOSV
aliasesEUVD, OSV
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-20454 is a medium vulnerability (CVSS 5.1) in Pcre Pcre2, published February 14, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.56%, the 75th percentile. Fixed in pcre2 10.32-2.el8.

References

Show 138 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open