PT-2008-1118 · Boost+1 · Boost+1

Publicado

2008-01-17

·

Atualizado

2021-04-28

·

CVE-2008-0171

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Boost versions 1.33 through 1.34 Boost versions prior to 1.34.1-r2
Description The issue allows context-dependent attackers to cause a denial of service, potentially leading to a crash, via an invalid regular expression. Multiple vulnerabilities in the Boost package can be exploited remotely, leading to disruption of protected information availability.
Recommendations For Boost versions 1.33 through 1.34, update to version 1.34.1-r2 or later to resolve the issue. For Boost versions prior to 1.34.1-r2, update to version 1.34.1-r2 or later to resolve the issue.

Exploit

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2015-09623
CVE-2008-0171
RHSA-2012:0305
RHSA-2012_0305
SUSE-RU-2021:1414-1

Produtos afetados

Boost
Red Hat