Lucene search
Ubuntu.comUB:CVE-2015-2305HistoryMar 30, 2015 - 12:00 a.m.
CVE-2015-2305
2015-03-3000:00:00
ubuntu.com
ubuntu.com
8
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
77.4%
Integer overflow in the regcomp implementation in the Henry Spencer BSD
regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in
NetBSD through 6.1.5 and other products, might allow context-dependent
attackers to execute arbitrary code via a large regular expression that
leads to a heap-based buffer overflow.
Bugs
- <https://bugs.php.net/bug.php?id=69248>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778404>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778397>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778392>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778391>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778393>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778408>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778410>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778403>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778389>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778409>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778406 (clamav)>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778412>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778413>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778398>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778394>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778402>
- <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778396 (cups)>
- <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778393 (llvm-toolchain-3.6)>
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 17.10 | noarch | clamav | < 0.98.7+dfsg-0ubuntu1 | UNKNOWN |
| ubuntu | 18.04 | noarch | clamav | < 0.98.7+dfsg-0ubuntu1 | UNKNOWN |
| ubuntu | 18.10 | noarch | clamav | < 0.98.7+dfsg-0ubuntu1 | UNKNOWN |
| ubuntu | 19.04 | noarch | clamav | < 0.98.7+dfsg-0ubuntu1 | UNKNOWN |
| ubuntu | 19.10 | noarch | clamav | < 0.98.7+dfsg-0ubuntu1 | UNKNOWN |
| ubuntu | 20.04 | noarch | clamav | < 0.98.7+dfsg-0ubuntu1 | UNKNOWN |
| ubuntu | 20.10 | noarch | clamav | < 0.98.7+dfsg-0ubuntu1 | UNKNOWN |
| ubuntu | 21.04 | noarch | clamav | < 0.98.7+dfsg-0ubuntu1 | UNKNOWN |
| ubuntu | 21.10 | noarch | clamav | < 0.98.7+dfsg-0ubuntu1 | UNKNOWN |
| ubuntu | 22.04 | noarch | clamav | < 0.98.7+dfsg-0ubuntu1 | UNKNOWN |
References
www.kb.cert.org/vuls/id/695940
guidovranken.wordpress.com/2015/02/04/full-disclosure-heap-overflow-in-h-spencers-regex-library-on-32-bit-systems/
launchpad.net/bugs/cve/CVE-2015-2305
nvd.nist.gov/vuln/detail/CVE-2015-2305
security-tracker.debian.org/tracker/CVE-2015-2305
ubuntu.com/security/notices/USN-2572-1
ubuntu.com/security/notices/USN-2594-1
www.cve.org/CVERecord?id=CVE-2015-2305
Related
prion
prion
Integer overflow
2015-03-30 10:59:00
nessus
nessus
Amazon Linux AMI : php (ALAS-2015-524)
2015-05-18 00:00:00
Fedora 22 : php-5.6.7-2.fc22 (2015-4255)
2015-03-27 00:00:00
Amazon Linux AMI : php56 (ALAS-2015-508)
2015-04-17 00:00:00
debiancve
debiancve
CVE-2015-2305
2015-03-30 10:59:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2015-524)
2015-09-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-508)
2015-09-08 00:00:00
Mageia: Security Advisory (MGASA-2015-0134)
2022-01-28 00:00:00
cve
cve
CVE-2015-2305
2015-03-30 10:59:00
f5
f5
K16831 : BSD regex library vulnerability CVE-2015-2305
2015-07-01 00:00:00
SOL16831 - BSD regex library vulnerability CVE-2015-2305
2015-07-01 00:00:00
amazon
amazon
Medium: php
2015-05-14 14:31:00
Important: php55
2015-04-15 21:49:00
Important: php56
2015-04-15 21:50:00
veracode
veracode
Heap-based Buffer Overflow
2019-05-02 05:39:23
Remote Code Execution (RCE) Via Memory Corruption
2019-05-02 05:39:23
Memory Corruption
2019-05-02 05:39:23
mageia
mageia
Updated php and libzip packages fix security vulnerabilities
2015-04-04 14:13:35
Updated clamav packages fix security vulnerabilities
2015-05-05 16:36:50
kaspersky
kaspersky
KLA10515 Multiple vulnerabilities in PHP and extensions
2015-03-30 00:00:00
debian
debian
[SECURITY] [DLA 444-1] php5 security update
2016-02-29 18:41:39
[SECURITY] [DSA 3195-1] php5 security update
2015-03-18 11:56:46
osv
osv
php5 - security update
2016-02-29 00:00:00
php5 - security update
2015-03-18 00:00:00
clamav - security update
2015-05-28 00:00:00
freebsd
freebsd
Several vulnerabilities found in PHP
2015-03-19 00:00:00
clamav -- multiple vulnerabilities
2015-04-29 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: clamav-0.98.7-1.fc21
2015-05-02 18:12:06
[SECURITY] Fedora 22 Update: clamav-0.98.7-1.fc22
2015-05-03 17:21:27
[SECURITY] Fedora 20 Update: clamav-0.98.7-1.fc20
2015-05-12 20:46:17
securityvulns
securityvulns
ClamAV multiple security vulnerabilities
2015-05-04 00:00:00
[ MDVSA-2015:221 ] clamav
2015-05-04 00:00:00
PHP multiple security vulnerabilities
2015-03-21 00:00:00
archlinux
archlinux
clamav: multiple issues
2015-05-03 00:00:00
ubuntu
ubuntu
ClamAV vulnerabilities
2015-05-05 00:00:00
PHP vulnerabilities
2015-04-20 00:00:00
slackware
slackware
[slackware-security] php
2015-04-22 01:22:40
suse
suse
Security update for php5 (important)
2015-05-13 15:07:04
Security update for MySQL (important)
2015-05-26 15:04:53
Security update for php53 (important)
2016-06-21 13:08:17
redhat
redhat
(RHSA-2015:1053) Moderate: php55 security and bug fix update
2015-06-04 00:00:00
(RHSA-2015:1066) Important: php54 security and bug fix update
2015-06-04 00:00:00
oraclelinux
oraclelinux
php55 security and bug fix update
2016-02-04 00:00:00
php54 security and bug fix update
2016-02-04 00:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
77.4%
Related for UB:CVE-2015-2305