NVD

Id
21135  
Name
CVE-2016-6354  
Description
Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-09-21  
Modified Date
2017-01-17  
Seq
2016-6354  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
115064 21135 CVE-2016-6354 DSA-3653  View
115065 21135 CVE-2016-6354 [oss-security] 20160718 CVE request: flex: Buffer overflow in generated code (yy_get_next_buffer)  View
115066 21135 CVE-2016-6354 [oss-security] 20160726 Re: CVE request: flex: Buffer overflow in generated code (yy_get_next_buffer)  View
115067 21135 CVE-2016-6354 https://github.com/westes/flex/commit/a5cbe929ac3255d371e698f62dc256afe7006466  View
115068 21135 CVE-2016-6354 GLSA-201701-31  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4084 JVNDB-2016-004857 flex の yy_get_next_buffer 関数におけるヒープベースのバッファオーバーフローの脆弱性 flex の yy_get_next_buffer 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2016-6354 92861 CVE-2016-6354 21135 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004857.html 2016-02-28 2016-09-27 View