5.3

CVE-2020-14155

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pcre ≫ Pcre Version < 8.44
Apple ≫ macOS Version < 11.0.1
Gitlab ≫ GitLab SwEdition community Version < 12.10.13
Gitlab ≫ GitLab SwEdition enterprise Version < 12.10.13
Gitlab ≫ GitLab SwEdition community Version >= 13.0.0 < 13.0.8
Gitlab ≫ GitLab SwEdition enterprise Version >= 13.0.0 < 13.0.8
Gitlab ≫ GitLab SwEdition community Version >= 13.1.0 < 13.1.2
Gitlab ≫ GitLab SwEdition enterprise Version >= 13.1.0 < 13.1.2
Netapp ≫ Active Iq Unified Manager Version - SwPlatform vmware_vsphere
Netapp ≫ Cloud Backup Version -
Netapp ≫ H410c Firmware Version -
   Netapp ≫ H410c Version -
Netapp ≫ H300s Firmware Version -
   Netapp ≫ H300s Version -
Netapp ≫ H500s Firmware Version -
   Netapp ≫ H500s Version -
Netapp ≫ H700s Firmware Version -
   Netapp ≫ H700s Version -
Netapp ≫ H410s Firmware Version -
   Netapp ≫ H410s Version -
Splunk ≫ Universal Forwarder Version >= 8.2.0 < 8.2.12
Splunk ≫ Universal Forwarder Version >= 9.0.0 < 9.0.6
Splunk ≫ Universal Forwarder Version 9.1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.18% 0.896
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
Third Party Advisory
Mailing List
https://www.oracle.com/security-alerts/cpuapr2022.html
Patch
Third Party Advisory
http://seclists.org/fulldisclosure/2020/Dec/32
Third Party Advisory
Mailing List
https://support.apple.com/kb/HT211931
Third Party Advisory
https://www.pcre.org/original/changelog.txt
Vendor Advisory
Release Notes
http://seclists.org/fulldisclosure/2021/Feb/14
Third Party Advisory
Mailing List
https://bugs.gentoo.org/717920
Patch
Third Party Advisory
Issue Tracking
https://support.apple.com/kb/HT212147
Third Party Advisory
https://about.gitlab.com/releases/2020/07/01/security-release-13-1-2-release/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20221028-0010/
Third Party Advisory