Lucene search
UbuntuUSN-5610-1HistorySep 14, 2022 - 12:00 a.m.
rust-regex vulnerability
2022-09-1400:00:00
ubuntu.com
23
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
8.3 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.004 Low
EPSS
Percentile
71.8%
Releases
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- rust-regex - Regular expressions for Rust
Details
Addison Crump discovered that rust-regex did not properly limit
the complexity of the regular expressions (regex) it parses.
An attacker could possibly use this issue to cause a denial of
service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 22.04 | noarch | librust-regex-dev | < 1.5.4-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | librust-regex+aho-corasick-dev | < 1.5.4-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | librust-regex+default-dev | < 1.5.4-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | librust-regex+memchr-dev | < 1.5.4-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | librust-regex+perf-dev | < 1.5.4-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | librust-regex+perf-literal-dev | < 1.5.4-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | librust-regex+unicode-age-dev | < 1.5.4-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | librust-regex+unicode-bool-dev | < 1.5.4-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | librust-regex+unicode-case-dev | < 1.5.4-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | librust-regex+unicode-dev | < 1.5.4-1ubuntu0.1 | UNKNOWN |
References
Related
veracode
veracode
Denial Of Service (DoS)
2022-04-09 00:46:36
rustsec
rustsec
osv
osv
Rust's regex crate vulnerable to regular expression denial of service
2022-03-08 20:00:36
Regexes with large repetitions on empty sub-expressions take a very long time to parse
2022-03-08 12:00:00
rust-regex vulnerability
2022-09-14 08:30:19
openvas
openvas
Fedora: Security Advisory for rust-regex (FEDORA-2022-ceb3e03c5e)
2022-03-23 00:00:00
Fedora: Security Advisory for rust-regex (FEDORA-2022-8436ac4c39)
2022-03-23 00:00:00
Fedora: Security Advisory for rust-regex (FEDORA-2022-d20d44ba98)
2022-03-27 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: rust-regex-1.5.5-1.fc36
2022-03-26 15:45:42
[SECURITY] Fedora 34 Update: rust-regex-1.5.5-1.fc34
2022-03-17 14:43:04
[SECURITY] Fedora 35 Update: rust-regex-1.5.5-1.fc35
2022-03-17 15:47:18
github
github
Rust's regex crate vulnerable to regular expression denial of service
2022-03-08 20:00:36
ubuntucve
ubuntucve
CVE-2022-24713
2022-03-08 00:00:00
cve
cve
CVE-2022-24713
2022-03-08 19:15:00
githubexploit
githubexploit
Exploit for Inefficient Regular Expression Complexity in Rust-Lang Regex
2022-06-05 22:17:00
prion
prion
Design/Logic Flaw
2022-03-08 19:15:00
alpinelinux
alpinelinux
CVE-2022-24713
2022-03-08 19:15:00
debiancve
debiancve
CVE-2022-24713
2022-03-08 19:15:00
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS : rust-regex vulnerability (USN-5610-1)
2022-09-14 00:00:00
SUSE SLED15 / SLES15 Security Update : sccache (SUSE-SU-2022:4073-1)
2022-11-19 00:00:00
SUSE SLED15 / SLES15 Security Update : rustup (SUSE-SU-2022:3949-1)
2022-11-13 00:00:00
redhatcve
redhatcve
CVE-2022-24713
2022-04-06 14:50:16
hackerone
hackerone
slackware
slackware
[slackware-security] mozilla-firefox
2022-04-05 19:19:02
[slackware-security] mozilla-thunderbird
2022-04-06 20:29:58
oraclelinux
oraclelinux
firefox security update
2022-04-08 00:00:00
firefox security update
2022-04-08 00:00:00
thunderbird security update
2022-04-11 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2022-04-07 00:00:00
Security update for MozillaThunderbird (important)
2022-04-13 00:00:00
debian
debian
[SECURITY] [DSA 5113-1] firefox-esr security update
2022-04-06 17:11:21
[SECURITY] [DLA 2971-1] firefox-esr security update
2022-04-07 08:43:52
[SECURITY] [DSA 5118-1] thunderbird security update
2022-04-10 18:10:05
kaspersky
kaspersky
KLA12497 Multiple vulnerabilities in Mozilla Firefox ESR
2022-04-05 00:00:00
KLA12498 Multiple vulnerabilities in Mozilla Thunderbird
2022-03-07 00:00:00
KLA12496 Multiple vulnerabilities in Mozilla Firefox
2022-04-05 00:00:00
redos
redos
ROS-20220412-02
2022-04-12 00:00:00
ROS-20220412-03
2022-04-12 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 91.8 — Mozilla
2022-04-05 00:00:00
Security Vulnerabilities fixed in Thunderbird 91.8 — Mozilla
2022-04-05 00:00:00
Security Vulnerabilities fixed in Firefox 99 — Mozilla
2022-04-05 00:00:00
almalinux
almalinux
Important: firefox security update
2022-04-08 13:40:04
Important: thunderbird security update
2022-04-11 13:29:58
rocky
rocky
firefox security update
2022-04-08 13:40:04
thunderbird security update
2022-04-11 13:29:58
redhat
redhat
(RHSA-2022:1287) Important: firefox security update
2022-04-08 13:40:04
(RHSA-2022:1285) Important: firefox security update
2022-04-08 13:33:48
(RHSA-2022:1286) Important: firefox security update
2022-04-08 13:39:06
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 91.8.0-alt1
2022-04-06 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 91.8.0-alt1
2022-04-06 00:00:00
amazon
amazon
Important: thunderbird
2022-04-25 23:45:00
mageia
mageia
Updated firefox/nss/rootcerts packages fix security vulnerability
2022-04-29 01:46:19
Updated thunderbird packages fix security vulnerabilities
2022-04-29 01:46:19
ubuntu
ubuntu
Firefox vulnerabilities
2022-04-07 00:00:00
ibm
ibm
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2022-08-10 00:00:00
Mozilla Thunderbird: Multiple Vulnerabilities
2022-08-10 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
8.3 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.004 Low
EPSS
Percentile
71.8%
Related for USN-5610-1