Security Advisory

CVE-2015-2305

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-03-30 10:00:00

Last updated 2024-08-06 05:10:15

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.

← Browse all CVEs View on cve.org ↗