CVE:CVE-2020-14155
CNNVD:CNNVD-202006-1036
PCRE是Philip Hazel个人开发者的一款使用C语言编写的开源正则表达式函数库。
PCRE 8.44之前版本中的libpcre存在输入验证错误漏洞。攻击者可借助大量请求利用该漏洞在系统上执行任意代码或导致应用程序崩溃。
solution:Upgrade pcre pcre to a higher version than 8.44,and avoid the version (,8.44); Upgrade apple macos to a higher version than 11.0.1,and avoid the version (,11.0.1); Upgrade gitlab gitlab to a higher version than 12.10.13,13.0.8,13.1.2,and avoid the version (,12.10.13),[13.0.0,13.0.8),[13.1.0,13.1.2); Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.15.0,and avoid the version 1.15.0; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -