CVE-2006-0459

2006-03-2900:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.038 Low

EPSS

Percentile

91.8%

JSON

flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator
(flex) before 2.5.33 does not allocate enough memory for grammars
containing (1) REJECT statements or (2) trailing context rules, which
causes flex to generate code that contains a buffer overflow that might
allow context-dependent attackers to execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchcyrus21-imapd< 2.1.18-2ubuntu2UNKNOWN
ubuntu6.10noarchcyrus21-imapd< 2.1.18-2ubuntu2UNKNOWN
ubuntu7.04noarchcyrus21-imapd< 2.1.18-2ubuntu2UNKNOWN
ubuntu6.06noarchflex< 2.5.31-38ubuntu1UNKNOWN
ubuntu6.10noarchflex< 2.5.31-38ubuntu1UNKNOWN
ubuntu7.04noarchflex< 2.5.31-38ubuntu1UNKNOWN
ubuntu6.06noarchgob2< 2.0.14-1ubuntu1UNKNOWN
ubuntu6.10noarchgob2< 2.0.14-1ubuntu1UNKNOWN
ubuntu7.04noarchgob2< 2.0.14-1ubuntu1UNKNOWN
ubuntu6.06noarchxine-extracodecs< 1.1.1+ubuntu1-2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	cyrus21-imapd	< 2.1.18-2ubuntu2	UNKNOWN
ubuntu	6.10	noarch	cyrus21-imapd	< 2.1.18-2ubuntu2	UNKNOWN
ubuntu	7.04	noarch	cyrus21-imapd	< 2.1.18-2ubuntu2	UNKNOWN
ubuntu	6.06	noarch	flex	< 2.5.31-38ubuntu1	UNKNOWN
ubuntu	6.10	noarch	flex	< 2.5.31-38ubuntu1	UNKNOWN
ubuntu	7.04	noarch	flex	< 2.5.31-38ubuntu1	UNKNOWN
ubuntu	6.06	noarch	gob2	< 2.0.14-1ubuntu1	UNKNOWN
ubuntu	6.10	noarch	gob2	< 2.0.14-1ubuntu1	UNKNOWN
ubuntu	7.04	noarch	gob2	< 2.0.14-1ubuntu1	UNKNOWN
ubuntu	6.06	noarch	xine-extracodecs	< 1.1.1+ubuntu1-2	UNKNOWN