CVE-2015-2305

Published: Mar 30, 2015Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.

Affected (13)

Products: Rxspencer Project: Rxspencer · Canonical: Ubuntu Linux · Debian: Debian Linux · +2 more

Show all products

Rxspencer Project: Rxspencer · Canonical: Ubuntu Linux · Debian: Debian Linux · Opensuse: Opensuse · Php: Php

1 product

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Rxspencer Project Rxspencer	Version 3.8.g5

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 14.10
Canonical Ubuntu Linux	Version 15.04
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Php Php	From 5.4.0 to 5.4.39
Php Php	From 5.5.0 to 5.5.23
Php Php	From 5.6.0 to 5.6.7

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (42)

http://blog.clamav.net/2015/04/clamav-0987-has-been-released.html

Source: cve@mitre.org

Third Party Advisory

http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=143403519711434&w=2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://openwall.com/lists/oss-security/2015/02/07/14

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://openwall.com/lists/oss-security/2015/03/11/8

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://php.net/ChangeLog-5.php

Source: cve@mitre.org

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2015-1053.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1066.html

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2015/dsa-3195

Source: cve@mitre.org

Third Party Advisory

http://www.kb.cert.org/vuls/id/695940

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/72611

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1031947

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2572-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2594-1

Source: cve@mitre.org

Third Party Advisory

https://guidovranken.wordpress.com/2015/02/04/full-disclosure-heap-overflow-in-h-spencers-regex-library-on-32-bit-systems/

Source: cve@mitre.org

ExploitThird Party Advisory

https://support.apple.com/HT205267

Source: cve@mitre.org

Third Party Advisory

http://blog.clamav.net/2015/04/clamav-0987-has-been-released.html