CVE-2020-11958

Опубликовано: 21 апр. 2020

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme.

Ссылки

http://www.openwall.com/lists/oss-security/2020/04/21/1
Mailing List
Third Party Advisory
https://blogs.gentoo.org/ago/2020/04/19/re2c-heap-overflow-in-scannerfill-scanner-cc/
Third Party Advisory
https://github.com/skvadrik/re2c/commit/c4603ba5ce229db83a2a4fb93e6d4b4e3ec3776a
Patch
Third Party Advisory
https://security.gentoo.org/glsa/202007-28
Third Party Advisory
https://usn.ubuntu.com/4338-1/
Third Party Advisory
https://usn.ubuntu.com/4338-2/
Third Party Advisory
https://www.openwall.com/lists/oss-security/2020/04/19/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/04/21/1
Mailing List
Third Party Advisory
https://blogs.gentoo.org/ago/2020/04/19/re2c-heap-overflow-in-scannerfill-scanner-cc/
Third Party Advisory
https://github.com/skvadrik/re2c/commit/c4603ba5ce229db83a2a4fb93e6d4b4e3ec3776a
Patch
Third Party Advisory
https://security.gentoo.org/glsa/202007-28
Third Party Advisory
https://usn.ubuntu.com/4338-1/
Third Party Advisory
https://usn.ubuntu.com/4338-2/
Third Party Advisory
https://www.openwall.com/lists/oss-security/2020/04/19/1
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:re2c:re2c:1.3:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 64%

0.00462

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2020-11958

CVSS3: 7.8

ubuntu

почти 6 лет назад

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme.

CVE-2020-11958

CVSS3: 2.8

redhat

почти 6 лет назад

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme.

CVE-2020-11958

CVSS3: 7.8

debian

почти 6 лет назад

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/sc ...

GHSA-qvw2-729q-g92x

CVSS3: 7.8

github

больше 3 лет назад

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme.

EPSS

Процентиль: 64%

0.00462

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787