The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1836-1 advisory.

    - CVE-2022-1586: Fixed out-of-bounds read via missing Unicode property matching issue in JIT compiled     regular expressions (bsc#1199232).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the pcre2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An out-of-bounds read vulnerability was discovered in the PCRE2 library in the     compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property     matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully     read in case-less matching within JIT. (CVE-2022-1586)

  - An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length()     function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular     expressions caused by duplicate data transfers. (CVE-2022-1587)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2361-1 advisory.

  - An out-of-bounds read vulnerability was discovered in the PCRE2 library in the     compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property     matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully     read in case-less matching within JIT. (CVE-2022-1586)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-5809 advisory.

    [10.32-3]
    - Resolves: CVE-2022-1586

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:5809 advisory.

  - An out-of-bounds read vulnerability was discovered in the PCRE2 library in the     compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property     matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully     read in case-less matching within JIT. (CVE-2022-1586)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of pcre2 installed on the remote host is prior to 10.23-11. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1871 advisory.

    An out-of-bounds read vulnerability was discovered in the PCRE2 library in the     compile_xclass_matchingpath() function of the  pcre2_jit_compile.c file. This involves a unicode property     matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully     read in case-less matching within JIT. (CVE-2022-1586)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the pcre2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An out-of-bounds read vulnerability was discovered in the PCRE2 library in the     compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property     matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully     read in case-less matching within JIT. (CVE-2022-1586)

  - An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length()     function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular     expressions caused by duplicate data transfers. (CVE-2022-1587)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5627-1 advisory.

    It was discovered that PCRE incorrectly handled memory when

    handling certain regular expressions. An attacker could possibly use this issue to cause applications     using PCRE to expose sensitive information.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:5251 advisory.

  - An out-of-bounds read vulnerability was discovered in the PCRE2 library in the     compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property     matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully     read in case-less matching within JIT. (CVE-2022-1586)

  - An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length()     function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular     expressions caused by duplicate data transfers. (CVE-2022-1587)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
161539	SUSE SLES12: libpcre2-16-0 / libpcre2-32-0 / libpcre2-8-0 / libpcre2-posix2 / etc (SUSE-SU-2022:1836-1)	Nessus	SuSE Local Security Checks	2022/5/26	2026/6/26	critical
165358	EulerOS Virtualization 2.9.1 : pcre2 (EulerOS-SA-2022-2361)	Nessus	Huawei Local Security Checks	2022/9/23	2023/10/11	critical
163064	SUSE SLED15 / SLES15 Security Update : pcre (SUSE-SU-2022:2361-1)	Nessus	SuSE Local Security Checks	2022/7/13	2023/7/13	critical
163742	Oracle Linux 8 : pcre2 (ELSA-2022-5809)	Nessus	Oracle Linux Local Security Checks	2022/8/2	2024/11/1	critical
164025	AlmaLinux 8 : pcre2 (5809) (ALSA-2022:5809)	Nessus	Alma Linux Local Security Checks	2022/8/10	2023/10/16	critical
167235	Amazon Linux 2 : pcre2 (ALAS-2022-1871)	Nessus	Amazon Linux Local Security Checks	2022/11/9	2024/12/11	critical
165070	EulerOS 2.0 SP9 : pcre2 (EulerOS-SA-2022-2330)	Nessus	Huawei Local Security Checks	2022/9/14	2023/10/12	critical
165325	Ubuntu 20.04 LTS / 22.04 LTS : PCRE vulnerabilities (USN-5627-1)	Nessus	Ubuntu Local Security Checks	2022/9/22	2024/8/28	critical
184917	Rocky Linux 9 : pcre2 (RLSA-2022:5251)	Nessus	Rocky Linux Local Security Checks	2023/11/7	2023/11/7	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical