PT-2015-5704 · Netbsd+3 · Henry Spencer Bsd Regex Library+4
Guido Vranken
·
Publicado
2015-03-18
·
Atualizado
2024-06-15
·
CVE-2015-2305
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
NetBSD versions prior to 6.1.5
Description
The issue is related to an integer overflow in the regcomp implementation in the Henry Spencer BSD regex library, which can lead to a heap-based buffer overflow. This might allow attackers to execute arbitrary code via a large regular expression.
Recommendations
For NetBSD versions prior to 6.1.5, update to version 6.1.5 or later to resolve the issue.
Exploit
Correção
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Henry Spencer Bsd Regex Library
Hp-Ux
Netbsd
Suse
Ubuntu