7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.038 Low
EPSS
Percentile
91.9%
flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator
(flex) before 2.5.33 does not allocate enough memory for grammars
containing (1) REJECT statements or (2) trailing context rules, which
causes flex to generate code that contains a buffer overflow that might
allow context-dependent attackers to execute arbitrary code.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 6.06 | noarch | cyrus21-imapd | < 2.1.18-2ubuntu2 | UNKNOWN |
ubuntu | 6.10 | noarch | cyrus21-imapd | < 2.1.18-2ubuntu2 | UNKNOWN |
ubuntu | 7.04 | noarch | cyrus21-imapd | < 2.1.18-2ubuntu2 | UNKNOWN |
ubuntu | 6.06 | noarch | flex | < 2.5.31-38ubuntu1 | UNKNOWN |
ubuntu | 6.10 | noarch | flex | < 2.5.31-38ubuntu1 | UNKNOWN |
ubuntu | 7.04 | noarch | flex | < 2.5.31-38ubuntu1 | UNKNOWN |
ubuntu | 6.06 | noarch | gob2 | < 2.0.14-1ubuntu1 | UNKNOWN |
ubuntu | 6.10 | noarch | gob2 | < 2.0.14-1ubuntu1 | UNKNOWN |
ubuntu | 7.04 | noarch | gob2 | < 2.0.14-1ubuntu1 | UNKNOWN |
ubuntu | 6.06 | noarch | xine-extracodecs | < 1.1.1+ubuntu1-2 | UNKNOWN |