PT-2020-12950 · Re2C+2 · Re2C+2

Agostino Sarubbo · Published 2020-04-21 · Updated 2023-01-27 · CVE-2020-11958

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions re2c version 1.3

Description The issue is a heap-based buffer overflow in the Scanner::fill function located in parse/scanner.cc, which can be triggered by a long lexeme.

Recommendations For re2c version 1.3, consider restricting the input length to prevent the buffer overflow until a patch is available. As a temporary workaround, avoid using long lexemes in the Scanner::fill function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-11958

USN-4338-1

USN-4338-2

Affected Products

Linuxmint

Ubuntu

Re2C

References · 22

• https://github.com/skvadrik/re2c/commit/c4603ba5ce229db83a2a4fb93e6d4b4e3ec3776a · Patch
• https://cve.org/CVERecord?id=CVE-2020-11958 · Security Note
• https://ubuntu.com/security/CVE-2020-11958 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11958 · Security Note
• https://security.gentoo.org/glsa/202007-28 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4338-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-11958 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4338-2 · Vendor Advisory
• https://usn.ubuntu.com/4338-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-11958 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-11958 · Vendor Advisory
• https://usn.ubuntu.com/4338-2 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2020-11958 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-11958 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4338-2 · Vendor Advisory