CVE-2008-0172

Published: Jan 17, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (NULL dereference and crash) via an invalid regular expression.

Affected (2)

Products: Boost: Boost

1 product

Configuration A

2 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Boost Boost	Version 1.33
Boost Boost	Version 1.34

Running on/with	Platform Versions
Ubuntu Ubuntu Linux	Version 6.06_lts
Ubuntu Ubuntu Linux	Version 6.10
Ubuntu Ubuntu Linux	Version 7.04
Ubuntu Ubuntu Linux	Version 7.10

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (42)

http://bugs.gentoo.org/show_bug.cgi?id=205955

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html

Source: cve@mitre.org

http://secunia.com/advisories/28511

Source: cve@mitre.org

http://secunia.com/advisories/28527

Source: cve@mitre.org

http://secunia.com/advisories/28545

Source: cve@mitre.org

http://secunia.com/advisories/28705

Source: cve@mitre.org

http://secunia.com/advisories/28860

Source: cve@mitre.org

http://secunia.com/advisories/28943

Source: cve@mitre.org

http://secunia.com/advisories/29323

Source: cve@mitre.org

http://secunia.com/advisories/48099

Source: cve@mitre.org

http://svn.boost.org/trac/boost/changeset/42674

Source: cve@mitre.org

http://svn.boost.org/trac/boost/changeset/42745

Source: cve@mitre.org

http://wiki.rpath.com/Advisories:rPSA-2008-0063

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml

Source: cve@mitre.org

http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/488102/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/27325

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-570-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0249

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-2143

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html

Source: cve@mitre.org

http://bugs.gentoo.org/show_bug.cgi?id=205955

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28511

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28527

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28545

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28705

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28860

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28943

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29323

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/48099

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.boost.org/trac/boost/changeset/42674

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.boost.org/trac/boost/changeset/42745

Source: af854a3a-2127-422b-91ae-364da2661108

http://wiki.rpath.com/Advisories:rPSA-2008-0063

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/488102/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/27325

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-570-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0249

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-2143

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.