PT-2008-1118 · Boost+1 · Boost+1

Published 2008-01-17 · Updated 2021-04-28 · CVE-2008-0171

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Boost versions 1.33 through 1.34 Boost versions prior to 1.34.1-r2

Description The issue allows context-dependent attackers to cause a denial of service, potentially leading to a crash, via an invalid regular expression. Multiple vulnerabilities in the Boost package can be exploited remotely, leading to disruption of protected information availability.

Recommendations For Boost versions 1.33 through 1.34, update to version 1.34.1-r2 or later to resolve the issue. For Boost versions prior to 1.34.1-r2, update to version 1.34.1-r2 or later to resolve the issue.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2015-09623

CVE-2008-0171

RHSA-2012:0305

RHSA-2012_0305

SUSE-RU-2021:1414-1

Affected Products

Boost

Red Hat

References · 53

• 🔥 http://svn.boost.org/trac/boost/changeset/42745 · Exploit
• 🔥 http://svn.boost.org/trac/boost/changeset/42674 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-0171 · Security Note
• https://osv.dev/vulnerability/SUSE-RU-2021:1414-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09623 · Security Note
• https://redhat.com/archives/fedora-package-announce/2008-January/msg00760.html · Vendor Advisory
• http://ubuntu.com/usn/usn-570-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html · Vendor Advisory
• http://mandriva.com/en/security/advisories?name=MDVSA-2008:032 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200802-08.xml · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2008-0171 · Note
• http://security.gentoo.org/glsa/glsa-200802-08.xml · Note
• https://issues.rpath.com/browse/RPL-2143 · Note
• https://bugzilla.suse.com/1076640 · Note
• https://bugzilla.suse.com/1082318 · Note