NVD

Id
24380  
Name
CVE-2015-2305  
Description
Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-03-30  
Modified Date
2017-01-02  
Seq
2015-2305  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
129018 24380 CVE-2015-2305 http://blog.clamav.net/2015/04/clamav-0987-has-been-released.html  View
129019 24380 CVE-2015-2305 APPLE-SA-2015-09-30-3  View
129020 24380 CVE-2015-2305 SUSE-SU-2015:0868  View
129021 24380 CVE-2015-2305 SUSE-SU-2015:0946  View
129022 24380 CVE-2015-2305 openSUSE-SU-2015:0644  View
129023 24380 CVE-2015-2305 openSUSE-SU-2015:0906  View
129024 24380 CVE-2015-2305 SSRT102066  View
129025 24380 CVE-2015-2305 [oss-security] 20150207 Spencer regexp heap overflow?  View
129026 24380 CVE-2015-2305 [oss-security] 20150311 Re: CVE request: spencer regexp  View
129027 24380 CVE-2015-2305 http://php.net/ChangeLog-5.php  View
129028 24380 CVE-2015-2305 RHSA-2015:1053  View
129029 24380 CVE-2015-2305 RHSA-2015:1066  View
129030 24380 CVE-2015-2305 DSA-3195  View
129031 24380 CVE-2015-2305 VU#695940  View
129032 24380 CVE-2015-2305 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
129033 24380 CVE-2015-2305 72611  View
129034 24380 CVE-2015-2305 1031947  View
129035 24380 CVE-2015-2305 USN-2572-1  View
129036 24380 CVE-2015-2305 USN-2594-1  View
129037 24380 CVE-2015-2305 https://guidovranken.wordpress.com/2015/02/04/full-disclosure-heap-overflow-in-h-spencers-regex-library-on-32-bit-systems/  View
129038 24380 CVE-2015-2305 https://support.apple.com/HT205267  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6672 JVNDB-2015-001992 Henry Spencer の正規表現 (regex) ライブラリにバッファオーバーフローの脆弱性 Henry Spencer が作成した正規表現 (regex) ライブラリは、ヒープベースのバッファオーバーフローの影響を受ける可能性があります。 CVE-2015-2305 79530 CVE-2015-2305 24380 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001992.html 2015-02-13 2016-02-26 View