CVE-2022-24713-POC

Ubuntu에서 CVE-2022-24713의 PoC Ubuntu에서 현재 rust-regex 패키지를 설치하십시오. 그런 다음, 이 저장소를 클론하십시오. 그런 다음, cargo build를 실행하십시오. regex 의존성은 /usr/share/cargo/registry 폴더로 설정되어 있으므로 의존성 문제가 없습니다. 컴파일이 터무니없이 오래 걸린다면, 이는 서비스 거부이며 CVE-2022-24713입니다. 그렇지 않다면, 패치되었습니다...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, Rust-Regex

Regex is an implementation of regular expressions for the Rust language. The regex crate includes built-in measures to prevent denial-of-service attacks caused by untrusted regexes or untrusted inputs matched by trusted regexes. These measures already provide reasonable defaults to prevent attack...

[SECURITY] Fedora 41 Update: rust-regex-automata-0.4.13-1.fc41

Automata construction and matching using regular expressions...

[SECURITY] Fedora 42 Update: rust-regex-automata-0.4.13-1.fc42

Automata construction and matching using regular expressions...

[SECURITY] Fedora 42 Update: rust-regex-1.12.2-1.fc42

An implementation of regular expressions for Rust. This implementation uses finite automata and guarantees linear time matching on all inputs...

Amazon Linux 2 : amazon-efs-utils, --advisory ALAS2-2025-3076 (ALAS-2025-3076)

The version of amazon-efs-utils installed on the remote host is prior to 2.4.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3076 advisory. regex is an implementation of regular expressions for the Rust language. The regex crate features built-in...

[SECURITY] Fedora 43 Update: rust-regex-automata-0.4.13-1.fc43

Automata construction and matching using regular expressions...

[SECURITY] Fedora 43 Update: rust-regex-1.12.2-1.fc43

An implementation of regular expressions for Rust. This implementation uses finite automata and guarantees linear time matching on all inputs...

[SECURITY] Fedora 43 Update: rust-regex-automata-0.4.11-1.fc43

Automata construction and matching using regular expressions...

Regular expression denial of service in Rust's regex crate

...

Ubuntu: Security Advisory (USN-5610-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5610-1 rust-regex vulnerability

Addison Crump discovered that rust-regex did not properly limit the complexity of the regular expressions regex it parses. An attacker could possibly use this issue to cause a denial of service...

USN-5610-1: rust-regex vulnerability

Addison Crump discovered that rust-regex did not properly limit the complexity of the regular expressions regex it parses. An attacker could possibly use this issue to cause a denial of service...

Ubuntu 20.04 LTS / 22.04 LTS : rust-regex vulnerability (USN-5610-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5610-1 advisory. Addison Crump discovered that rust-regex did not properly limit the complexity of the regular expressions regex it parses. An attacker could possibly...

Exploit for Uncontrolled Resource Consumption in Rust-Lang Regex

POC of CVE-2022-24713 on Ubuntu Install the current rust-regex...

ROS-20220412-03

Vulnerability in Mozilla Thunderbird email client, related to a memory freeing error when processing HTML content after the VR process is destroyed. Exploitation of the vulnerability could allow an attacker, acting remotely, create a specially crafted web page, trick the victim into opening it,...

Mozilla: Denial of Service via complex regular expressions

regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane defaults to preven...

Mozilla: Denial of Service via complex regular expressions

regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane defaults to preven...

Fedora: Security Advisory for rust-regex (FEDORA-2022-d20d44ba98)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for rust-regex (FEDORA-2022-ceb3e03c5e)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...