CVE-2018-21232

Name
CVE-2018-21232
Description
re2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Mailing List https://www.openwall.com/lists/oss-security/2020/04/27/2
Exploit https://github.com/skvadrik/re2c/issues/219
MLIST http://www.openwall.com/lists/oss-security/2020/05/14/4

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:re2c:re2c:*:*:*:*:*:*:*:* re2c >= None < 2.0

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
re2c edge-main 1.3-r1 None possibly vulnerable
re2c 3.22-main 1.3-r1 None possibly vulnerable
re2c 3.21-main 1.3-r1 None possibly vulnerable
re2c 3.20-main 1.3-r1 None possibly vulnerable
re2c 3.19-main 1.3-r1 None possibly vulnerable
re2c 3.12-main 1.3-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
re2c 3.11-main 1.3-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable