Login Request a demo
Medium severity · published Jun 15, 2020
CVE-2020-14155
libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring
5.3
CVSS
4.2%
EPSS
No
On KEV
Description
libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GI
GitLab · GitLab
before 12.10.13; before 12.10.13; 13.0.0 before 13.0.8; 13.0.0 before 13.0.8; 13.1.0 before 13.1.2; 13.1.0 before 13.1.2 · source: NVD
MA
macOS · Apple
before 11.0.1 · source: NVD
AI
Active IQ Unified Manager · Netapp
All versions, or not specified · source: NVD
CB
Cloud Backup · Netapp
All versions, or not specified · source: NVD
CD
Clustered Data Ontap · Netapp
All versions, or not specified · source: NVD
CC
Communications Cloud Native Core Policy · Oracle
1.15.0 · source: NVD
HF
H300s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H410c Firmware · Netapp
All versions, or not specified · source: NVD
HF
H410s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H500s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H700s Firmware · Netapp
All versions, or not specified · source: NVD
OS
Ontap Select Deploy Administration Utility · Netapp
All versions, or not specified · source: NVD
Affected product
MA
macOS
Apple
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-14155
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-14155
Mailing List
http://seclists.org/fulldisclosure/2020/Dec/32
Mailing List
http://seclists.org/fulldisclosure/2021/Feb/14
Third Party Advisory
https://about.gitlab.com/releases/2020/07/01/security-release-13-1-2-release/
Issue Tracking
https://bugs.gentoo.org/717920
Mailing List
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
Third Party Advisory
https://security.netapp.com/advisory/ntap-20221028-0010/
More from macOS
10.0
CVE-2025-43300
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
10.0
CVE-2025-24201
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
10.0
CVE-2025-24085
Apple Multiple Products Use-After-Free Vulnerability
9.8
CVE-2026-65400
Apple macOS Improper Authentication Vulnerability
9.8
CVE-2025-31200
Apple Multiple Products Memory Corruption Vulnerability