CVE-2022-41409

Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.

References

Affected packages

Git / github.com/pcre2project/pcre2

Affected ranges

Type: GIT
Repo: https://github.com/pcre2project/pcre2
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

94e1c001761373b7d9450768aa15d04c25547a35

Affected versions

pcre2-10.*

pcre2-10.38

pcre2-10.38-RC1

pcre2-10.39

pcre2-10.40

Database specific

vanir_signatures

[
    {
        "signature_version": "v1",
        "target": {
            "file": "src/pcre2test.c"
        },
        "id": "CVE-2022-41409-0118e1b8",
        "signature_type": "Line",
        "source": "https://github.com/pcre2project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "62489852517137625250442895310532729877",
                "201713021635601015043319097914336087915",
                "322293490913182853245187905827756638256",
                "207896007219727419804105114721414926380",
                "252707345794246848607483269209822253197",
                "132236701326433796789918249164278653346"
            ]
        },
        "deprecated": false
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "process_data",
            "file": "src/pcre2test.c"
        },
        "id": "CVE-2022-41409-9947a8ff",
        "signature_type": "Function",
        "source": "https://github.com/pcre2project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35",
        "digest": {
            "length": 30670.0,
            "function_hash": "337203437419393383331572633756157855685"
        },
        "deprecated": false
    }
]