GLSA Advocate
Joined: 12 May 2004 Posts: 2663
|
Posted: Tue Jul 28, 2020 2:26 am Post subject: [ GLSA 202007-28 ] re2c |
|
|
Gentoo Linux Security Advisory
Title: re2c: Buffer overflow (GLSA 202007-28)
Severity: normal
Exploitable: remote
Date: 2020-07-27
Bug(s): #718350
ID: 202007-28
Synopsis
A vulnerability in re2c could lead to a Denial of Service
condition.
Background
re2c is a tool for generating C-based recognizers from regular
expressions.
Affected Packages
Package: dev-util/re2c
Vulnerable: < 1.3-r1
Unaffected: >= 1.3-r1
Architectures: All supported architectures
Description
A heap buffer overflow vulnerability was discovered in re2c.
Impact
An attacker could possibly cause a Denial of Service condition.
Workaround
There is no known workaround at this time.
Resolution
All re2c users should upgrade to the latest version: Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=dev-util/re2c-1.3-r1"
|
References
CVE-2020-11958 |
|