{"id":"CVE-2019-20838","aliases":["ALSA-2021:4373","BELL-CVE-2019-20838","DEBIAN-CVE-2019-20838","EUVD-2019-11375","GHSA-689f-qv4w-xgqf","JLSEC-2026-176","RHSA-2021:4373","RHSA-2021:4614","RLSA-2021:4373","SUSE-SU-2021:3529-1","SUSE-SU-2021:3652-1","UBUNTU-CVE-2019-20838","USN-5425-1","openSUSE-SU-2021:1441-1","openSUSE-SU-2021:3529-1"],"status":"published","title":"libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \\X...","description":"libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \\X or \\R has more than one fixed quantifier, a related issue to CVE-2019-20454.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0284,"percentile":0.86764,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2020-06-15T16:50:48Z","modified":"2026-10-29T11:01:28Z","fixes":[{"ecosystem":"Julia","package":"PCRE_jll","fixed_in":["8.44.0+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"pcre3","fixed_in":["2:8.39-9ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"pcre3","fixed_in":["2:8.39-12ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"pcre3","fixed_in":["2:8.39-13ubuntu0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pcre-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pcre-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pcre-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pcre-utf16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pcre-utf32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"pcre3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:8.39-15","2:8.39-15.1"]},{"source":"osv","ecosystem":"Julia","package":"PCRE_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.44.0+0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pcre-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pcre-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pcre-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pcre-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pcre-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pcre-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pcre-utf16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pcre-utf16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pcre-utf32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pcre-utf32-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"pcre-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"pcre-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"pcre-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"pcre-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"pcre-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"pcre-utf16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"pcre-utf32-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-107.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-107.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-107.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-2.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-2.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-2.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-2.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_cluster-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.16-9.Final_redhat_2.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_cluster-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.16-9.Final_redhat_2.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-21.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-21.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-20.redhat_1.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-ap24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-20.redhat_1.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-20.redhat_1.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-20.redhat_1.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-40.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_md-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-40.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-78.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-67.GA.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_security-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-67.GA.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-78.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-39.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-39.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-nghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-39.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-8.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-chil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-7.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-chil-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-7.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-8.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-8.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-8.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-8.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.10-22.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-pkcs11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.10-22.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-8.jbcs.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-107.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-107.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-107.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-pgsql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-util-sqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-84.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-2.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-2.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-2.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-2.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.78.0-2.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_cluster-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.16-9.Final_redhat_2.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_cluster-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.16-9.Final_redhat_2.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-21.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-21.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-20.redhat_1.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk-ap24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-20.redhat_1.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk-ap24-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-20.redhat_1.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-20.redhat_1.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-40.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_md-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-40.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-78.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-78.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-67.GA.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_security-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-67.GA.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-78.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-78.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-78.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-39.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-39.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-nghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-39.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-8.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-chil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-7.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-chil-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-7.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-8.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-8.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-8.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-8.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-8.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.10-22.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-pkcs11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.10-22.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1g-8.el8jbcs"}]}],"bundled":13},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.42-6.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-20.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-20.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-20.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-20.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"selinux-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20140730-36.5.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"selinux-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20140730-36.5.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"selinux-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20140730-36.5.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"selinux-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20140730-36.5.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"selinux-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20140730-36.5.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP3","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP4","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP5","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"selinux-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20140730-36.5.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"selinux-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20140730-36.5.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"selinux-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20140730-36.5.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"selinux-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20140730-36.5.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"selinux-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20140730-36.5.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"selinux-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20140730-36.5.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"selinux-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20140730-36.5.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"selinux-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20140730-36.5.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"selinux-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20140730-36.5.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-8.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"pcre3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.39-9ubuntu0.1"}]}],"versions":["2:8.39-5ubuntu3","2:8.39-8","2:8.39-9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"pcre3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.39-12ubuntu0.1"}]}],"versions":["2:8.39-12","2:8.39-12build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"pcre3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.39-13ubuntu0.22.04.1"}]}],"versions":["2:8.39-13build3","2:8.39-13build4","2:8.39-13build5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"pcre3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:8.39-15","2:8.39-15build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"pcre3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:8.39-15.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"pcre3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.31-2ubuntu2.3+esm1"}]}],"versions":["1:8.31-2","1:8.31-2ubuntu2","1:8.31-2ubuntu2.1","1:8.31-2ubuntu2.2","1:8.31-2ubuntu2.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pcre3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.38-3.1ubuntu0.1~esm1"}]}],"versions":["2:8.35-7.1ubuntu1","2:8.38-1ubuntu1","2:8.38-3","2:8.38-3.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"pcre3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.39-9ubuntu0.1"}]}],"versions":["2:8.39-5ubuntu3","2:8.39-8","2:8.39-9"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"pcre3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.39-12ubuntu0.1"}]}],"versions":["2:8.39-12","2:8.39-12build1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"pcre3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.39-13ubuntu0.22.04.1"}]}],"versions":["2:8.39-13build3","2:8.39-13build4","2:8.39-13build5"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-lp152.7.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"pcre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.45-20.10.1"}]}],"bundled":2}],"products":[{"vendor":"apple","product":"macos"},{"vendor":"pcre","product":"pcre"},{"vendor":"splunk","product":"universal_forwarder"}],"references":[{"url":"https://bugs.gentoo.org/717920","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","VDB Entry","fix","web"]},{"url":"https://www.pcre.org/original/changelog.txt","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","web","report"]},{"url":"https://support.apple.com/kb/HT211931","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web"]},{"url":"http://seclists.org/fulldisclosure/2020/Dec/32","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://support.apple.com/kb/HT212147","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web"]},{"url":"http://seclists.org/fulldisclosure/2021/Feb/14","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20838","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-689f-qv4w-xgqf"},{"url":"https://errata.almalinux.org/8/ALSA-2021-4373.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-20838","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-14155","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-20838","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-20838","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4373","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1848436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1848444","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4373.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-20838","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-20838","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14155","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14155","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4614","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1930310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1930324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995634","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4614.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17567","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17567","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17567","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-13950","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-13950","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13950","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-35452","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-35452","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-35452","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3688","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3688","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3712","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3712","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3712","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20210824.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23840","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23840","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23840","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20210216.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23841","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23841","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23841","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-26690","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-26690","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26690","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-26691","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-26691","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26691","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30641","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30641","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30641","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-34798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2005128","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-34798","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-34798","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4373","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213529-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1172973","tags":["report"]},{"url":"https://bugzilla.suse.com/1172974","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14155","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213652-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1025709","tags":["report"]},{"url":"https://bugzilla.suse.com/1030066","tags":["report"]},{"url":"https://bugzilla.suse.com/1030803","tags":["report"]},{"url":"https://bugzilla.suse.com/1030805","tags":["report"]},{"url":"https://bugzilla.suse.com/1030807","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7246","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-20838","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5425-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-14155","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ANBRV4PU5AWEEYUWZYBLJCQBG3AHEGD/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DOG6FED4Y3TBAFL2V2XUUC43MKZLFGH3/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-20838","description":"libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \\X or \\R has more than one fixed quantifier, a related issue to CVE-2019-20454.","status":"published","published":"2020-06-15T16:50:48Z","modified":"2026-10-08T21:13:52.362Z","updated_at":"2026-11-02T14:20:17.11067Z"}],"euvd":[{"id":"EUVD-2019-11375","description":"libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \\X or \\R has more than one fixed quantifier, a related issue to CVE-2019-20454.","status":"published","published":"2020-06-15T16:50:48Z","modified":"2026-10-08T21:13:52Z","updated_at":"2026-11-02T17:27:26.452288Z"}],"ghsa":[{"id":"GHSA-689f-qv4w-xgqf","title":"libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \\X...","description":"libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \\X or \\R has more than one fixed quantifier, a related issue to CVE-2019-20454.","status":"published","published":"2022-05-24T17:20:26Z","modified":"2024-04-07T05:00:41Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:57:03.777371Z"}],"nvd":[{"id":"CVE-2019-20838","description":"libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \\X or \\R has more than one fixed quantifier, a related issue to CVE-2019-20454.","status":"published","published":"2020-06-15T17:15:09.683Z","modified":"2026-10-08T22:16:54.42Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:05:47.558959Z"}],"osv":[{"id":"BELL-CVE-2019-20838","title":"CVE-2019-20838 does not affect BellSoft software","status":"withdrawn","published":"2020-06-15T17:15:00Z","modified":"2026-01-26T09:47:37.878496Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-20838","description":"libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \\X or \\R has more than one fixed quantifier, a related issue to CVE-2019-20454.","status":"published","published":"2020-06-15T17:15:09.683Z","modified":"2026-03-15T22:28:10.097822Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:12.010761Z"},{"id":"DEBIAN-CVE-2019-20838","description":"libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \\X or \\R has more than one fixed quantifier, a related issue to CVE-2019-20454.","status":"published","published":"2020-06-15T17:15:09.683Z","modified":"2026-10-09T09:47:31.41891144Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"JLSEC-2026-176","description":"libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and `\\X` or `\\R` has more than one fixed quantifier, a related issue to CVE-2019-20454.","status":"published","published":"2026-04-22T20:20:10.334Z","modified":"2026-07-25T18:24:03.59046161Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"RHSA-2021:4373","title":"Red Hat Security Advisory: pcre security update","status":"published","published":"2024-09-13T22:14:02Z","modified":"2026-10-09T10:02:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:4614","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP10 security update","status":"published","published":"2024-09-29T18:13:51Z","modified":"2026-10-09T10:02:55Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RLSA-2021:4373","title":"Low: pcre security update","description":"PCRE is a Perl-compatible regular expression library. \n\nSecurity Fix(es):\n\n* pcre: Buffer over-read in JIT when UTF is disabled and \\X or \\R has fixed quantifier greater than 1 (CVE-2019-20838)\n\n* pcre: Integer overflow when parsing callout numeric arguments (CVE-2020-14155)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.","status":"published","published":"2021-11-09T09:12:45Z","modified":"2026-02-05T08:00:11.849061Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2019-20838","description":"libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \\X or \\R has more than one fixed quantifier, a related issue to CVE-2019-20454.","status":"published","published":"2020-06-15T17:15:00Z","modified":"2026-04-22T12:17:46.953863Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:21.213407Z"},{"id":"ALSA-2021:4373","title":"Low: pcre security update","description":"PCRE is a Perl-compatible regular expression library. \n\nSecurity Fix(es):\n\n* pcre: Buffer over-read in JIT when UTF is disabled and \\X or \\R has fixed quantifier greater than 1 (CVE-2019-20838)\n\n* pcre: Integer overflow when parsing callout numeric arguments (CVE-2020-14155)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-11-09T09:12:45Z","modified":"2026-10-29T11:01:28.304449917Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"openSUSE-SU-2021:1441-1","title":"Security update for pcre","description":"This update for pcre fixes the following issues:\n\nUpdate pcre to version 8.45:\n\n- CVE-2020-14155: Fixed integer overflow via a large number after a '(?C' substring (bsc#1172974).\n- CVE-2019-20838: Fixed buffer over-read in JIT compiler (bsc#1172973)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-11-02T13:07:08Z","modified":"2026-02-04T04:32:18.016106Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3529-1","title":"Security update for pcre","description":"This update for pcre fixes the following issues:\n\nUpdate pcre to version 8.45:\n\n- CVE-2020-14155: Fixed integer overflow via a large number after a '(?C' substring (bsc#1172974).\n- CVE-2019-20838: Fixed buffer over-read in JIT compiler (bsc#1172973)\n","status":"published","published":"2021-10-27T07:23:54Z","modified":"2026-02-04T04:02:42.619318Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"SUSE-SU-2021:3529-1","title":"Security update for pcre","description":"This update for pcre fixes the following issues:\n\nUpdate pcre to version 8.45:\n\n- CVE-2020-14155: Fixed integer overflow via a large number after a '(?C' substring (bsc#1172974).\n- CVE-2019-20838: Fixed buffer over-read in JIT compiler (bsc#1172973)\n","status":"published","published":"2021-10-27T07:23:57Z","modified":"2026-02-04T03:39:01.617132Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3652-1","title":"Security update for pcre","description":"This update for pcre fixes the following issues:\n\nUpdate pcre to version 8.45:\n\n- CVE-2020-14155: Fixed integer overflow via a large number after a '(?C' substring (bsc#1172974).\n- CVE-2019-20838: Fixed buffer over-read in JIT compiler (bsc#1172973).\n- CVE-2017-7244: Fixed invalid read in _pcre32_xclass() (bsc#1030807).\n- CVE-2017-7245: Fixed buffer overflow in the pcre32_copy_substring (bsc#1030805).\n- CVE-2017-7246: Fixed another buffer overflow in the pcre32_copy_substring (bsc#1030803).\n- CVE-2017-7186: Fixed denial of service caused by an invalid Unicode property lookup (bsc#1030066).\n- CVE-2017-6004: Fixed denial of service via crafted regular expression (bsc#1025709).\n","status":"published","published":"2021-11-10T16:40:42Z","modified":"2026-02-04T03:08:45.85764Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"USN-5425-1","title":"pcre3 vulnerabilities","description":"Yunho Kim discovered that PCRE incorrectly handled memory when \nhandling certain regular expressions. An attacker could possibly use\nthis issue to cause applications using PCRE to expose sensitive\ninformation. This issue only affects Ubuntu 18.04 LTS, \nUbuntu 20.04 LTS, Ubuntu 21.10 and Ubuntu 22.04 LTS. (CVE-2019-20838)\n\nIt was discovered that PCRE incorrectly handled memory when \nhandling certain regular expressions. An attacker could possibly use\nthis issue to cause applications using PCRE to have unexpected \nbehavior. This issue only affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM,\nUbuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-14155)\n","status":"published","published":"2022-05-17T15:31:52Z","modified":"2026-06-29T13:49:38.256833629Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}