CVE-2019-16555

2019-12-1715:15:16

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.9%

JSON

A user-supplied regular expression in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier was processed in a way that wasn’t interruptible, allowing attackers to have Jenkins evaluate a regular expression without the ability to interrupt this process.

CPENameOperatorVersion
build-failure-analyzer-plugineqbuild-failure-analyzer-1.10.1
build-failure-analyzer-plugineqbuild-failure-analyzer-1.8.0
build-failure-analyzer-plugineqbuild-failure-analyzer-1.10.0
build-failure-analyzer-plugineqbuild-failure-analyzer-1.13.0
build-failure-analyzer-plugineqbuild-failure-analyzer-1.10.3
build-failure-analyzer-plugineqbuild-failure-analyzer-1.15.0
build-failure-analyzer-plugineqbuild-failure-analyzer-1.24.1
build-failure-analyzer-plugineqbuild-failure-analyzer-1.5.1
build-failure-analyzer-plugineqbuild-failure-analyzer-1.19.1
build-failure-analyzer-plugineqbuild-failure-analyzer-1.11.0

Name	Operator	Version
build-failure-analyzer-plugin	eq	build-failure-analyzer-1.10.1
build-failure-analyzer-plugin	eq	build-failure-analyzer-1.8.0
build-failure-analyzer-plugin	eq	build-failure-analyzer-1.10.0
build-failure-analyzer-plugin	eq	build-failure-analyzer-1.13.0
build-failure-analyzer-plugin	eq	build-failure-analyzer-1.10.3
build-failure-analyzer-plugin	eq	build-failure-analyzer-1.15.0
build-failure-analyzer-plugin	eq	build-failure-analyzer-1.24.1
build-failure-analyzer-plugin	eq	build-failure-analyzer-1.5.1
build-failure-analyzer-plugin	eq	build-failure-analyzer-1.19.1
build-failure-analyzer-plugin	eq	build-failure-analyzer-1.11.0