CVE-2020-14155: pcre before 8.44 (exclusive); +15 more affected products

Affected technology

pcre · before 8.44 (exclusive)
pcre

macos · before 11.0.1 (exclusive)
apple

gitlab · before 12.10.13 (exclusive)
gitlab

gitlab · from 13.0.0 (inclusive), before 13.0.8 (exclusive)
gitlab

gitlab · from 13.1.0 (inclusive), before 13.1.2 (exclusive)
gitlab

communications cloud native core policy · 1.15.0
oracle

active iq unified manager · Version not applicable in the source CPE
netapp

cloud backup · Version not applicable in the source CPE
netapp

clustered data ontap · Version not applicable in the source CPE
netapp

ontap select deploy administration utility · Version not applicable in the source CPE
netapp

steelstore cloud integrated storage · Version not applicable in the source CPE
netapp

h410c firmware · Version not applicable in the source CPE
netapp

h300s firmware · Version not applicable in the source CPE
netapp

h500s firmware · Version not applicable in the source CPE
netapp

h700s firmware · Version not applicable in the source CPE
netapp

h410s firmware · Version not applicable in the source CPE
netapp

universal forwarder · from 8.2.0 (inclusive), before 8.2.12 (exclusive)
splunk

universal forwarder · from 9.0.0 (inclusive), before 9.0.6 (exclusive)
splunk

universal forwarder · 9.1.0
splunk

n/a · n/a
Vendor not specified by the source

Description’s affected range: before 8.44

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.3/10) rates confidentiality and integrity impact as none; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.