Описание
Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | flex | Not affected | ||
| Red Hat Enterprise Linux 6 | flex | Not affected | ||
| Red Hat Enterprise Linux 7 | bogofilter | Will not fix | ||
| Red Hat Enterprise Linux 7 | flex | Will not fix |
Показывать по
Дополнительная информация
Статус:
EPSS
5.9 Medium
CVSS3
2.6 Low
CVSS2
Связанные уязвимости
Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.
Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.
Heap-based buffer overflow in the yy_get_next_buffer function in Flex ...
Security update for flex, at, libbonobo, netpbm, openslp, sgmltool, virtuoso
EPSS
5.9 Medium
CVSS3
2.6 Low
CVSS2