Логотип exploitDog
bind:CVE-2022-31099
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-31099

Количество 2

Количество 2

nvd логотип

CVE-2022-31099

больше 3 лет назад

rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, the stack may overflow, possibly enabling a Denial of Service attack. This happens when parsing an expression with several hundred levels of nesting, causing the process to abort immediately. This is a security concern for you, if your service parses untrusted rulex expressions (expressions provided by an untrusted user), and your service becomes unavailable when the process running rulex aborts due to a stack overflow. The crash is fixed in version **0.4.3**. Affected users are advised to update to this version. There are no known workarounds for this issue.

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-v78m-2q7v-fjqp

больше 3 лет назад

Uncontrolled Recursion in rulex

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-31099

rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, the stack may overflow, possibly enabling a Denial of Service attack. This happens when parsing an expression with several hundred levels of nesting, causing the process to abort immediately. This is a security concern for you, if your service parses untrusted rulex expressions (expressions provided by an untrusted user), and your service becomes unavailable when the process running rulex aborts due to a stack overflow. The crash is fixed in version **0.4.3**. Affected users are advised to update to this version. There are no known workarounds for this issue.

CVSS3: 6.5
1%
Низкий
больше 3 лет назад
github логотип
GHSA-v78m-2q7v-fjqp

Uncontrolled Recursion in rulex

CVSS3: 6.5
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу