ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-1587

—
CVSS 3.1
9.1 critical
EPSS
3%p85
Published
()
Modified
Description

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.

Vendors
pcreredhatfedoraprojectnetapp
Products
pcre2, enterprise linux, fedora, active iq unified manager, hci management node, ontap select deploy administration utility, solidfire, h300s firmware, h500s firmware, h700s firmware, h410s firmware, h410c firmware
Weakness
CWE-125
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news

No ingested article mentions this CVE yet.