GoogleOSV:CVE-2018-21232

HistoryApr 29, 2020 - 2:15 p.m.

CVE-2018-21232

2020-04-2914:15:14

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.8%

re2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags.

CPENameOperatorVersion
re2ceq1.1.1
re2ceq0.13.7.5
re2ceq0.14
re2ceq0.15.2
re2ceq0.16
re2ceq1.2
re2ceq1.2.1
re2ceq0.13.7.1
re2ceq0.14.1
re2ceq1.0.2

Name	Operator	Version
re2c	eq	1.1.1
re2c	eq	0.13.7.5
re2c	eq	0.14
re2c	eq	0.15.2
re2c	eq	0.16
re2c	eq	1.2
re2c	eq	1.2.1
re2c	eq	0.13.7.1
re2c	eq	0.14.1
re2c	eq	1.0.2

Rows per page:

1-10 of 241

References

www.openwall.com/lists/oss-security/2020/05/14/4

github.com/skvadrik/re2c/issues/219

www.openwall.com/lists/oss-security/2020/04/27/2