libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
{
"versions": [
{
"introduced": "0"
},
{
"fixed": "11.0.1"
},
{
"introduced": "0"
},
{
"fixed": "12.10.13"
},
{
"introduced": "0"
},
{
"fixed": "12.10.13"
},
{
"introduced": "13.0.0"
},
{
"fixed": "13.0.8"
},
{
"introduced": "13.0.0"
},
{
"fixed": "13.0.8"
},
{
"introduced": "13.1.0"
},
{
"fixed": "13.1.2"
},
{
"introduced": "13.1.0"
},
{
"fixed": "13.1.2"
},
{
"introduced": "9.0.0"
},
{
"fixed": "9.0.6"
},
{
"introduced": "0"
},
{
"last_affected": "9.1.0"
}
]
}[
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8.44"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.15.0"
}
]
},
{
"events": [
{
"introduced": "8.2.0"
},
{
"fixed": "8.2.12"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-14155.json"