CVE-2017-9729

Опубликовано: 16 июн. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) in the check_dst_limits_calc_pos_1 function in misc/regex/regexec.c when processing a crafted regular expression.

Ссылки

http://openwall.com/lists/oss-security/2017/06/16/4
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2017/06/16/4
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:uclibc:uclibc:0.9.33.2:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00334

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-674

Связанные уязвимости

CVE-2017-9729

CVSS3: 7.5

debian

больше 8 лет назад

In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) ...

GHSA-c2v6-69qq-j8h4

CVSS3: 7.5

github

больше 3 лет назад

In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) in the check_dst_limits_calc_pos_1 function in misc/regex/regexec.c when processing a crafted regular expression.

EPSS

Процентиль: 56%

0.00334

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-674