CVE-2016-9108

Опубликовано: 03 фев. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Integer overflow in the js_regcomp function in regexp.c in Artifex Software, Inc. MuJS before commit b6de34ac6d8bb7dd5461c57940acfbd3ee7fd93e allows attackers to cause a denial of service (application crash) via a crafted regular expression.

Ссылки

http://www.openwall.com/lists/oss-security/2016/10/30/12
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/96006
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1390266
Issue Tracking
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IMPCTUBV2UUTSKAGVAW3EL6HJJWHRZQZ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WMI77FMFDWOTUUKKPTQLIB7JEXFTING4/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4FE2LXVJM5PXHUGSFOT2KTA75O5ACV4/
http://www.openwall.com/lists/oss-security/2016/10/30/12
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/96006
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1390266
Issue Tracking
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IMPCTUBV2UUTSKAGVAW3EL6HJJWHRZQZ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WMI77FMFDWOTUUKKPTQLIB7JEXFTING4/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4FE2LXVJM5PXHUGSFOT2KTA75O5ACV4/

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:artifex:mujs:*:*:*:*:*:*:*:*

Версия до 2016-10-31 (включая)

EPSS

Процентиль: 74%

0.00825

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVE-2016-9108

CVSS3: 7.5

ubuntu

около 9 лет назад

CVE-2016-9108

CVSS3: 7.5

debian

около 9 лет назад

Integer overflow in the js_regcomp function in regexp.c in Artifex Sof ...

GHSA-gw5r-44xc-8j82

CVSS3: 7.5

github

больше 3 лет назад

EPSS

Процентиль: 74%

0.00825

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-190