selinux-policy (SUSE:OpenStack Cloud 9) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:OpenStack Cloud 9 package selinux-policy, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (7)

• CVE-2017-7245 — CVSS 7.8 (high): Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a…
• CVE-2017-7246 — CVSS 7.8 (high): Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a…
• CVE-2017-6004 — CVSS 7.5 (high): The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled…
• CVE-2019-20838 — CVSS 7.5 (high): libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier…
• CVE-2017-7186 — CVSS 7.5 (high): libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read…
• CVE-2017-7244 — CVSS 5.5 (medium): The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory…
• CVE-2020-14155 — CVSS 5.3 (medium): libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.