PT-2020-8876 · Re2C+3 · Re2C+3

Trofi · Published 2020-04-29 · Updated 2023-08-18 · CVE-2018-21232

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions re2c versions prior to 2.0

Description The issue is related to uncontrolled recursion, which causes stack consumption in the find fixed tags function. This can lead to potential system instability.

Recommendations For versions prior to 2.0, update to version 2.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the find fixed tags function until a patch is available.

Exploit

Fix

Uncontrolled Recursion

Weakness Enumeration

CWE-674

Related Identifiers

ALT-PU-2021-1713

AZL-7337

CVE-2018-21232

ECHO-4FC2-67BD-0A7A

MGASA-2021-0299

OPENSUSE-SU-2023_3353-1

SUSE-SU-2023:3353-1

SUSE-SU-2023_3353-1

Affected Products

Alt Linux

Debian

Suse

Re2C

References · 19

• 🔥 https://github.com/skvadrik/re2c/issues/219 · Exploit
• https://ubuntu.com/security/CVE-2018-21232 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-21232 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-7337 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-21232 · Security Note
• https://cve.org/CVERecord?id=CVE-2018-21232 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-21232 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-21232 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-21232 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2021-0299 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3353-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0299.html · Security Note
• https://suse.com/support/update/announcement/2023/suse-su-20233353-1 · Note
• https://t.me/cvenotify/3393 · Telegram Post
• https://openwall.com/lists/oss-security/2020/04/27/2 · Note