Wind River Support Network

HomeDefectsLIN9-10056
Fixed

LIN9-10056 : Security Advisory - libpcre - CVE-2019-20838

Created: Jun 15, 2020    Updated: Apr 22, 2022
Resolved Date: Jul 30, 2020
Found In Version: 9.0.0.1
Fix Version: 9.0.0.26
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.

CREATE(Triage):(User=admin) CVE-2019-20838 (https://nvd.nist.gov/vuln/detail/CVE-2019-20838)

CVEs


Live chat
Online