Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-0459HistoryMar 29, 2006 - 11:02 p.m.
CVE-2006-0459
2006-03-2923:02:00
Debian Security Bug Tracker
security-tracker.debian.org
7
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.038 Low
EPSS
Percentile
91.9%
flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33 does not allocate enough memory for grammars containing (1) REJECT statements or (2) trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependent attackers to execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | flex | < 2.5.33-1 | flex_2.5.33-1_all.deb |
| Debian | 11 | all | flex | < 2.5.33-1 | flex_2.5.33-1_all.deb |
| Debian | 999 | all | flex | < 2.5.33-1 | flex_2.5.33-1_all.deb |
| Debian | 13 | all | flex | < 2.5.33-1 | flex_2.5.33-1_all.deb |
Related
nessus
nessus
Ubuntu 4.10 / 5.04 / 5.10 : flex vulnerability (USN-260-1)
2006-03-13 00:00:00
GLSA-200603-07 : flex: Potential insecure code generation
2006-03-13 00:00:00
Debian DSA-1020-1 : flex - buffer overflow
2006-10-14 00:00:00
openvas
openvas
Debian Security Advisory DSA 1020-1 (flex)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200603-07 (flex)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200603-07 (flex)
2008-09-24 00:00:00
ubuntucve
ubuntucve
CVE-2006-0459
2006-03-29 00:00:00
nvd
nvd
CVE-2006-0459
2006-03-29 23:02:00
CVE-2006-0975
2006-03-03 11:02:00
osv
osv
flex - buffer overflow
2006-03-28 00:00:00
cvelist
cvelist
CVE-2006-0459
2006-03-29 23:00:00
cve
cve
CVE-2006-0459
2006-03-29 23:02:00
CVE-2006-0975
2006-03-03 11:02:00
redhatcve
redhatcve
CVE-2006-0459
2015-10-30 09:29:30
ubuntu
ubuntu
flex vulnerability
2006-03-07 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 1020-1] New flex packages fix insecure code generation
2006-03-28 00:00:00
prion
prion
Buffer overflow
2006-03-29 23:02:00
gentoo
gentoo
flex: Potential insecure code generation
2006-03-10 00:00:00
debian
debian
[SECURITY] [DSA 1020-1] New flex packages fix insecure code generation
2006-03-27 23:19:56
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.038 Low
EPSS
Percentile
91.9%
Related for DEBIANCVE:CVE-2006-0459