322 matches found
GLSA-201502-14 : grep: Denial of Service
The remote host is affected by the vulnerability described in GLSA-201502-14 grep: Denial of Service A heap buffer overrun has been fixed in the bmexectrans function in kwset.c. Impact : A local user can cause Denial of Service. Workaround : There is no known workaround at this time. %NASLMINLEVE...
grep: Denial of service
Background grep is the GNU regular expression matcher. Description A heap buffer overrun has been fixed in the bmexectrans function in kwset.c. Impact A local user can cause Denial of Service. Workaround There is no known workaround at this time. Resolution All grep users should upgrade to the...
DEBIAN-CVE-2015-1345
The bmexectrans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service out-of-bounds heap read and crash via crafted input when using the -F option...
CVE-2015-1345
The bmexectrans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service out-of-bounds heap read and crash via crafted input when using the -F option...
CVE-2015-1345
The bmexectrans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service out-of-bounds heap read and crash via crafted input when using the -F option...
Out-of-bounds
The bmexectrans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service out-of-bounds heap read and crash via crafted input when using the -F option...
CVE-2015-1345
The bmexectrans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service out-of-bounds heap read and crash via crafted input when using the -F option...
UBUNTU-CVE-2015-1345
The bmexectrans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service out-of-bounds heap read and crash via crafted input when using the -F option...
CVE-2015-1345
The bmexectrans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service out-of-bounds heap read and crash via crafted input when using the -F option...
CVE-2015-1345
The bmexectrans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service out-of-bounds heap read and crash via crafted input when using the -F option...
CVE-2015-1345
CVE-2015-1345 covers a local DoS bug in grep’s bmexec_trans function (kwset.c) affecting grep versions 2.19–2.21, exploitable via crafted input when using the -F option. The connected F5 advisory mirrors the vulnerability being associated with the grep utility and lists affected BIG-IP LineRate/g...
openSUSE Security Update : grep (openSUSE-2015-121)
grep was updated to fix one security issue. This security issue was fixed : - Heap buffer overrun with a carefully crafted combination of input and regexp CVE-2015-1345. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
[SECURITY] Fedora 21 Update: grep-2.21-2.fc21
The GNU versions of commonly used grep utilities. Grep searches through textual input for lines which contain a match to a specified pattern and th en prints the matching lines. GNU's grep utilities include grep, egrep and fgr ep. GNU grep is needed by many scripts, so it shall be installed on...
grep 'kwset.c' remote buffer overflow vulnerability
Grep is a text search tool for Unix systems. A remote buffer overflow vulnerability exists in grep 'kwset.c', which allows an attacker to execute arbitrary code or launch a denial-of-service attack within the context of an application...
Fedora 21 : grep-2.21-2.fc21 (2015-1053)
This is an update fixing buffer overflow of grep -F. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Update for grep FEDORA-2015-1053
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Solaris Third-Party Patch Update : grep (cve_2012_5667_heap_buffer)
The remote Solaris system is missing necessary patches to address security updates : - Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long input line that triggers a heap-based buffer overflow...
gollum-grit_adapter Search Functionality Allows Arbitrary Command Execution
The gollum-gritadapter gem contains a flaw that can allow arbitrary command execution. Grit implements its search functionality by shelling out to git grep. In turn, git grep takes a -O or --open-files-in-pages option that will pipe the results of grep to an arbitrary process. By failing to...
Grep < 2.11 Integer Overflow Crash PoC
No description provided by source. Grep 2.11 is vulnerable to int overflow exploitation. http://lists.gnu.org/archive/html/bug-grep/2012-03/msg00007.html Although it is patched in the recent Grep, This update has not been pushed to the Ubuntu repos, or the Redhat repos, leaving 99% of those OS'sa...
GLSA-201403-07 : grep: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-201403-07 grep: User-assisted execution of arbitrary code An integer overflow flaw has been discovered in grep. Impact : An attacker could entice a user to run grep on a specially crafted file, possibly resulting in execution of...