Low: grep

🗓️ 18 Jan 2016 00:00:00Reported by AmazonType

amazon

amazon🔗 alas.aws.amazon.com👁 35 Views

A heap-based buffer overflow flaw in grep could crash the program or lead to memory disclosure by running specially crafted input

Reporter	Title	Published	Views	Family All 53
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GNU grep utility affect IBM Security Network Protection (CVE-2012-5667, and CVE-2015-1345)	16 Jun 201821:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU grep affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance (CVE-2015-1345, CVE-2012-5667)	17 Jun 201822:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in GNU Grep affects PowerKVM (CVE-2015-1345)	18 Jun 201801:30	–	ibm
Amazon	Low: grep	22 Sep 201500:00	–	amazon
Tenable Nessus	Amazon Linux AMI : grep (ALAS-2015-598)	23 Sep 201500:00	–	nessus
Tenable Nessus	Amazon Linux AMI : grep (ALAS-2016-639)	19 Jan 201600:00	–	nessus
Tenable Nessus	CentOS 6 : grep (CESA-2015:1447)	28 Jul 201500:00	–	nessus
Tenable Nessus	CentOS 7 : grep (CESA-2015:2111)	2 Dec 201500:00	–	nessus
Tenable Nessus	F5 Networks BIG-IP : Grep vulnerability (K42891424)	29 Jun 201700:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Amazon Linux	1	i686	grep	2.20-1.16.amzn1	grep-2.20-1.16.amzn1.i686.rpm
Amazon Linux	1	x86_64	grep	2.20-1.16.amzn1	grep-2.20-1.16.amzn1.x86_64.rpm
Amazon Linux	1	i686	grep-debuginfo	2.20-1.16.amzn1	grep-debuginfo-2.20-1.16.amzn1.i686.rpm
Amazon Linux	1	x86_64	grep-debuginfo	2.20-1.16.amzn1	grep-debuginfo-2.20-1.16.amzn1.x86_64.rpm

18 Jan 2016 00:00Current

9.2High risk

Vulners AI Score9.2

CVSS 22.1

EPSS0.00135

grep buffer overflow security vulnerability update cve-2015-1345