CVE-2015-1345

🗓️ 12 Feb 2015 16:00:00Reported by Debian Security Bug TrackerType

The bmexec_trans function in grep 2.19 through 2.21 allows local users to cause a denial of service via crafted input when using the -F option

Reporter	Title	Published	Views	Family All 53
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GNU grep utility affect IBM Security Network Protection (CVE-2012-5667, and CVE-2015-1345)	16 Jun 201821:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU grep affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance (CVE-2015-1345, CVE-2012-5667)	17 Jun 201822:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in GNU Grep affects PowerKVM (CVE-2015-1345)	18 Jun 201801:30	–	ibm
Amazon	Low: grep	22 Sep 201500:00	–	amazon
Amazon	Low: grep	18 Jan 201600:00	–	amazon
Tenable Nessus	Amazon Linux AMI : grep (ALAS-2015-598)	23 Sep 201500:00	–	nessus
Tenable Nessus	Amazon Linux AMI : grep (ALAS-2016-639)	19 Jan 201600:00	–	nessus
Tenable Nessus	CentOS 6 : grep (CESA-2015:1447)	28 Jul 201500:00	–	nessus
Tenable Nessus	CentOS 7 : grep (CESA-2015:2111)	2 Dec 201500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	any	grep	2.20-4.1	grep_2.20-4.1_any.deb
Debian	12	any	grep	2.20-4.1	grep_2.20-4.1_any.deb
Debian	13	any	grep	2.20-4.1	grep_2.20-4.1_any.deb
Debian	14	any	grep	2.20-4.1	grep_2.20-4.1_any.deb
Debian	999	any	grep	2.20-4.1	grep_2.20-4.1_any.deb

12 Feb 2015 16:00Current

8.5High risk

Vulners AI Score8.5

CVSS 22.1

EPSS0.00486