Splunk Universal Forwarder vulnerabilities

62 known vulnerabilities affecting splunk/universal_forwarder.

Total CVEs

62

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL6HIGH26MEDIUM24LOW6

Vulnerabilities

Page 4 of 4

CVE-2020-14155MEDIUMCVSS 5.3≥ 8.2.0, < 8.2.12≥ 9.0.0, < 9.0.6+1 more2020-06-15

CVE-2020-14155 [MEDIUM] CWE-190 CVE-2020-14155: libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring. libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.

CVE-2019-20454HIGHCVSS 7.5≥ 8.2.0, < 8.2.12≥ 9.0.0, < 9.0.6+1 more2020-02-14

CVE-2019-20454 [HIGH] CWE-125 CVE-2019-20454: An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and us An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.

← Previous4 / 4