CVE-2008-0171

Published: Jan 17, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression.

Affected (3)

Products: Boost: Boost, Boost Regex Library

Boost

2 products

Boost

Boost Regex Library

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Boost Boost	Version 1.33
Boost Boost	Version 1.34
Boost Boost Regex Library	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (42)

http://bugs.gentoo.org/show_bug.cgi?id=205955

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html

Source: cve@mitre.org

http://secunia.com/advisories/28511

Source: cve@mitre.org

http://secunia.com/advisories/28527

Source: cve@mitre.org

http://secunia.com/advisories/28545

Source: cve@mitre.org

http://secunia.com/advisories/28705

Source: cve@mitre.org

http://secunia.com/advisories/28860

Source: cve@mitre.org

http://secunia.com/advisories/28943

Source: cve@mitre.org

http://secunia.com/advisories/29323

Source: cve@mitre.org

http://secunia.com/advisories/48099

Source: cve@mitre.org

http://svn.boost.org/trac/boost/changeset/42674

Source: cve@mitre.org

Exploit

http://svn.boost.org/trac/boost/changeset/42745

Source: cve@mitre.org

Exploit

http://wiki.rpath.com/Advisories:rPSA-2008-0063

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml

Source: cve@mitre.org

http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/488102/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/27325

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-570-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0249

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-2143

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html

Source: cve@mitre.org

http://bugs.gentoo.org/show_bug.cgi?id=205955