CVE:CVE-2022-1587
CNNVD:CNNVD-202205-3350
PCRE是Philip Hazel个人开发者的一款使用C语言编写的开源正则表达式函数库。
PCRE 存在安全漏洞。攻击者利用该漏洞通过 pcre2_jit_compile.c 中的 get_recurse_data_length 强制读取 PCRE 的无效内存地址，以触发拒绝服务或获取敏感信息。
solution:Upgrade pcre pcre2 to a higher version than 10.40,and avoid the version (,10.40); Upgrade redhat enterprise_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 35,36,and avoid the version 35,36; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -