CVE-2015-1345

Description

The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.

Risk Information

Base Score

9.1

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS Score

Exploitation Probability

0.135

Associated Vulnerability

Vulnerability	OS Platform
(RHSA-2015:1447) Low: grep security, bug fix, and enhancement update grep-2.20-3.el6.i686.rpm	Linux
(RHSA-2015:1447) Low: grep security, bug fix, and enhancement update grep-2.20-3.el6.x86_64.rpm	Linux
(RHSA-2015:2111) Low: grep security and bug fix update grep-2.20-2.el7.x86_64.rpm	Linux
(RHSA-2015:2111)Low: security and bug fix update grep-debuginfo-2.20-2.el7.x86_64.rpm	Linux
Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-1345)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234