p PatchFirst

CVE-2015-2305

CVE-2015-2305

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.

EPSS 8.9% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • clamav Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.98.7+dfsg-1

    Update to 0.98.7+dfsg-1

  • clamav Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.98.7+dfsg-1

    Update to 0.98.7+dfsg-1

  • clamav Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.98.7+dfsg-1

    Update to 0.98.7+dfsg-1

  • librcsb-core-wrapper Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.005-3

    Update to 1.005-3

  • librcsb-core-wrapper Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.005-3

    Update to 1.005-3

  • librcsb-core-wrapper Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.005-3

    Update to 1.005-3

  • newlib Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.0.0-1

    Update to 2.0.0-1

  • newlib Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.0.0-1

    Update to 2.0.0-1

  • newlib Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.0.0-1

    Update to 2.0.0-1

  • nvi Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.81.6-13

    Update to 1.81.6-13

  • nvi Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.81.6-13

    Update to 1.81.6-13

  • nvi Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.81.6-13

    Update to 1.81.6-13

  • vigor Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.016-24

    Update to 0.016-24

  • vigor Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.016-24

    Update to 0.016-24

  • vigor Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.016-24

    Update to 0.016-24

  • clamav Ubuntu:14.04:LTS

    Versions
    • 0.97.8+dfsg-1ubuntu4
    • 0.97.8+dfsg-1ubuntu5
    • 0.98.1+dfsg-1ubuntu4
    • 0.98.1+dfsg-1ubuntu5
    • 0.98.1+dfsg-2ubuntu2
    • 0.98.1+dfsg-4ubuntu1
    • 0.98.1+dfsg-4ubuntu1.1
    • 0.98.5+addedllvm-0ubuntu0.14.04.1
    • 0.98.6+dfsg-0ubuntu0.14.04.1
    Affected ranges
    • ECOSYSTEM: < 0.98.7+dfsg-0ubuntu0.14.04.1

    Update to 0.98.7+dfsg-0ubuntu0.14.04.1

  • php5 Ubuntu:14.04:LTS

    Versions
    • 5.5.3+dfsg-1ubuntu2
    • 5.5.3+dfsg-1ubuntu3
    • 5.5.6+dfsg-1ubuntu1
    • 5.5.6+dfsg-1ubuntu2
    • 5.5.8+dfsg-2ubuntu1
    • 5.5.9+dfsg-1ubuntu1
    • 5.5.9+dfsg-1ubuntu2
    • 5.5.9+dfsg-1ubuntu3
    • 5.5.9+dfsg-1ubuntu4
    • 5.5.9+dfsg-1ubuntu4.1
    • 5.5.9+dfsg-1ubuntu4.2
    • 5.5.9+dfsg-1ubuntu4.3
    • 5.5.9+dfsg-1ubuntu4.4
    • 5.5.9+dfsg-1ubuntu4.5
    • 5.5.9+dfsg-1ubuntu4.6
    • 5.5.9+dfsg-1ubuntu4.7
    Affected ranges
    • ECOSYSTEM: < 5.5.9+dfsg-1ubuntu4.9

    Update to 5.5.9+dfsg-1ubuntu4.9

  • vigor Ubuntu:14.04:LTS

    Versions
    • 0.016-22
    • 0.016-23
    Affected ranges
    • ECOSYSTEM: < 0.016-24build0.14.04.1

    Update to 0.016-24build0.14.04.1

  • nvi Ubuntu:16.04:LTS

    Versions
    • 1.81.6-11
    • 1.81.6-12
    • 1.81.6-12build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openrpt Ubuntu:16.04:LTS

    Versions
    • 3.3.10-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • radare2 Ubuntu:16.04:LTS

    Versions
    • 0.9.6-3.1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openrpt Ubuntu:18.04:LTS

    Versions
    • 3.3.12-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →