PT-2015-5704 · Netbsd+3 · Henry Spencer Bsd Regex Library+4

Guido Vranken · Published 2015-03-18 · Updated 2024-06-15 · CVE-2015-2305

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetBSD versions prior to 6.1.5

Description The issue is related to an integer overflow in the regcomp implementation in the Henry Spencer BSD regex library, which can lead to a heap-based buffer overflow. This might allow attackers to execute arbitrary code via a large regular expression.

Recommendations For NetBSD versions prior to 6.1.5, update to version 6.1.5 or later to resolve the issue.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2015-2305

DLA-233-1

DLA-444-1

DSA-3195-1

HPSBUX03337

MGASA-2015-0134

MGASA-2015-0190

OPENSUSE-SU-2024:10290-1

OPENSUSE-SU-2024:10344-1

OPENSUSE-SU-2024:10571-1

RHSA-2015:1053

RHSA-2015:1066

SUSE-SU-2015:0298-1

SUSE-SU-2015:0370-1

SUSE-SU-2015:0436-1

SUSE-SU-2015:0620-1

SUSE-SU-2015:0868-1

SUSE-SU-2015:0871-1

SUSE-SU-2015:0882-1

SUSE-SU-2015:0882-2

SUSE-SU-2015:0946-1

SUSE-SU-2015:1018-1

SUSE-SU-2015:1177-1

SUSE-SU-2015:1265-1

SUSE-SU-2016:1638-1

USN-2572-1

USN-2594-1

Affected Products

Henry Spencer Bsd Regex Library

Hp-Ux

Netbsd

Suse

Ubuntu

References · 368

• 🔥 https://guidovranken.wordpress.com/2015/02/04/full-disclosure-heap-overflow-in-h-spencers-regex-library-on-32-bit-systems · Exploit
• https://cve.org/CVERecord?id=CVE-2015-2305 · Security Note
• https://advisories.mageia.org/MGASA-2015-0190.html · Security Note
• https://security-tracker.debian.org/tracker/source-package/php5 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00398 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2668 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0118 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0273 · Security Note
• https://linux.oracle.com/errata/ELSA-2015-1053.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-2305 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2301 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3329 · Security Note
• http://marc.info/?l=bugtraq&m=143403519711434&w=2 · Vendor Advisory
• http://php.net/ChangeLog-5.php · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02523 · Security Note