CVE-2022-41409 Integer overflow in n/a
An integer overflow in pcre2test allows attackers to cause a denial of service via negative input, affecting users of the PCRE2 library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-41409?
CVE-2022-41409 is a high-severity vulnerability in n/a, published on 18 Jul 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.
Weakness: CWE-190
Which versions are affected by CVE-2022-41409?
It affects 1 product.
Linux distribution packages (15)
pcre2 SUSE:Linux Enterprise Micro 5.1 | All versions | 10.31-150000.3.15.1 |
pcre2 SUSE:Linux Enterprise Micro 5.2 | All versions | 10.31-150000.3.15.1 |
pcre2 SUSE:Linux Enterprise Micro 5.3 | All versions | 10.39-150400.4.9.1 |
pcre2 SUSE:Linux Enterprise Micro 5.4 | All versions | 10.39-150400.4.9.1 |
pcre2 SUSE:Linux Enterprise Module for Basesystem 15 SP4 | All versions | 10.39-150400.4.9.1 |
pcre2 SUSE:Linux Enterprise Module for Basesystem 15 SP5 | All versions | 10.39-150400.4.9.1 |
pcre2 SUSE:Linux Enterprise Server 12 SP5 | All versions | 10.34-1.13.1 |
pcre2 SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 10.34-1.13.1 |
pcre2 SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 10.34-1.13.1 |
pcre2 SUSE:Manager Proxy 4.2 | All versions | 10.31-150000.3.15.1 |
pcre2 SUSE:Manager Server 4.2 | All versions | 10.31-150000.3.15.1 |
pcre2 openSUSE:Leap 15.4 | All versions | 10.39-150400.4.9.1 |
pcre2 openSUSE:Leap 15.5 | All versions | 10.39-150400.4.9.1 |
pcre2 openSUSE:Leap Micro 5.3 | All versions | 10.39-150400.4.9.1 |
pcre2 openSUSE:Leap Micro 5.4 | All versions | 10.39-150400.4.9.1 |
Products include Pcre Pcre2.
How do I fix CVE-2022-41409?
Upgrade to a fixed version.
Is CVE-2022-41409 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-41409 exists.
Other vulnerabilities in n/a
Sources
Also known as ALPINE-CVE-2022-41409, AZL-27500, CLEANSTART-2024-WK36293, CLSA-2026-1777308424, DEBIAN-CVE-2022-41409, ECHO-740c-f4e8-2a12 and 8 more.