ISOMAN

CVE

CVE-2020-11958

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource

References

  1. http://www.openwall.com/lists/oss-security/2020/04/21/1
  2. https://blogs.gentoo.org/ago/2020/04/19/re2c-heap-overflow-in-scannerfill-scanner-cc/
  3. https://github.com/skvadrik/re2c/commit/c4603ba5ce229db83a2a4fb93e6d4b4e3ec3776a
  4. https://security.gentoo.org/glsa/202007-28
  5. https://usn.ubuntu.com/4338-1/
  6. https://usn.ubuntu.com/4338-2/
  7. https://www.openwall.com/lists/oss-security/2020/04/19/1
  8. http://www.openwall.com/lists/oss-security/2020/04/21/1
  9. https://blogs.gentoo.org/ago/2020/04/19/re2c-heap-overflow-in-scannerfill-scanner-cc/
  10. https://github.com/skvadrik/re2c/commit/c4603ba5ce229db83a2a4fb93e6d4b4e3ec3776a
  11. https://security.gentoo.org/glsa/202007-28
  12. https://usn.ubuntu.com/4338-1/
  13. https://usn.ubuntu.com/4338-2/
  14. https://www.openwall.com/lists/oss-security/2020/04/19/1