2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
5.1%
grep is the GNU regular expression matcher.
A heap buffer overrun has been fixed in the bmexec_trans function in kwset.c.
A local user can cause Denial of Service.
There is no known workaround at this time.
All grep users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=sys-apps/grep-2.21-r1"
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Gentoo | any | all | sys-apps/grep | < 2.21-r1 | UNKNOWN |