Search

Find a vulnerability

Search criteria Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    8 vulnerabilities found for boost by boost

    CVE-2016-9840 (GCVE-0-2016-9840)

    Vulnerability from nvd – Published: 2017-05-23 03:56 – Updated: 2024-08-06 02:59
    VLAI
    Summary
    inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    https://access.redhat.com/errata/RHSA-2017:1221 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2017:1220 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2017:3047 vendor-advisoryx_refsource_REDHAT
    http://www.openwall.com/lists/oss-security/2016/1… mailing-listx_refsource_MLIST
    http://www.securityfocus.com/bid/95131 vdb-entryx_refsource_BID
    https://access.redhat.com/errata/RHSA-2017:3046 vendor-advisoryx_refsource_REDHAT
    http://lists.opensuse.org/opensuse-updates/2017-0… vendor-advisoryx_refsource_SUSE
    https://security.gentoo.org/glsa/201701-56 vendor-advisoryx_refsource_GENTOO
    http://www.securitytracker.com/id/1039427 vdb-entryx_refsource_SECTRACK
    https://access.redhat.com/errata/RHSA-2017:1222 vendor-advisoryx_refsource_REDHAT
    http://lists.opensuse.org/opensuse-updates/2017-0… vendor-advisoryx_refsource_SUSE
    https://access.redhat.com/errata/RHSA-2017:3453 vendor-advisoryx_refsource_REDHAT
    http://lists.opensuse.org/opensuse-updates/2016-1… vendor-advisoryx_refsource_SUSE
    https://access.redhat.com/errata/RHSA-2017:2999 vendor-advisoryx_refsource_REDHAT
    https://lists.debian.org/debian-lts-announce/2019… mailing-listx_refsource_MLIST
    https://usn.ubuntu.com/4246-1/ vendor-advisoryx_refsource_UBUNTU
    https://lists.debian.org/debian-lts-announce/2020… mailing-listx_refsource_MLIST
    https://usn.ubuntu.com/4292-1/ vendor-advisoryx_refsource_UBUNTU
    http://www.oracle.com/technetwork/security-adviso… x_refsource_CONFIRM
    https://www.oracle.com/security-alerts/cpujul2020.html x_refsource_MISC
    http://www.oracle.com/technetwork/security-adviso… x_refsource_CONFIRM
    https://support.apple.com/HT208144 x_refsource_CONFIRM
    https://github.com/madler/zlib/commit/6a043145ca6… x_refsource_CONFIRM
    https://wiki.mozilla.org/MOSS/Secure_Open_Source/… x_refsource_MISC
    https://bugzilla.redhat.com/show_bug.cgi?id=1402345 x_refsource_CONFIRM
    https://support.apple.com/HT208113 x_refsource_CONFIRM
    https://support.apple.com/HT208112 x_refsource_CONFIRM
    https://support.apple.com/HT208115 x_refsource_CONFIRM
    https://wiki.mozilla.org/images/0/09/Zlib-report.pdf x_refsource_MISC
    https://security.gentoo.org/glsa/202007-54 vendor-advisoryx_refsource_GENTOO
    Date Public
    2016-09-30 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T02:59:03.590Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "RHSA-2017:1221",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2017:1221"
              },
              {
                "name": "RHSA-2017:1220",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2017:1220"
              },
              {
                "name": "RHSA-2017:3047",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2017:3047"
              },
              {
                "name": "[oss-security] 20161205 Re: CVE Request: zlib security issues found during audit",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2016/12/05/21"
              },
              {
                "name": "95131",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/95131"
              },
              {
                "name": "RHSA-2017:3046",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2017:3046"
              },
              {
                "name": "openSUSE-SU-2017:0077",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html"
              },
              {
                "name": "GLSA-201701-56",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "https://security.gentoo.org/glsa/201701-56"
              },
              {
                "name": "1039427",
                "tags": [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
                  "x_transferred"
                ],
                "url": "http://www.securitytracker.com/id/1039427"
              },
              {
                "name": "RHSA-2017:1222",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2017:1222"
              },
              {
                "name": "openSUSE-SU-2017:0080",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html"
              },
              {
                "name": "RHSA-2017:3453",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2017:3453"
              },
              {
                "name": "openSUSE-SU-2016:3202",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html"
              },
              {
                "name": "RHSA-2017:2999",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2017:2999"
              },
              {
                "name": "[debian-lts-announce] 20190324 [SECURITY] [DLA 1725-1] rsync security update",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html"
              },
              {
                "name": "USN-4246-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "https://usn.ubuntu.com/4246-1/"
              },
              {
                "name": "[debian-lts-announce] 20200129 [SECURITY] [DLA 2085-1] zlib security update",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html"
              },
              {
                "name": "USN-4292-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "https://usn.ubuntu.com/4292-1/"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://support.apple.com/HT208144"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://support.apple.com/HT208113"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://support.apple.com/HT208112"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://support.apple.com/HT208115"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf"
              },
              {
                "name": "GLSA-202007-54",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "https://security.gentoo.org/glsa/202007-54"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2016-09-30T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2021-01-06T16:16:02.000Z",
            "orgId": "f81092c5-7f14-476d-80dc-24857f90be84",
            "shortName": "microfocus"
          },
          "references": [
            {
              "name": "RHSA-2017:1221",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:1221"
            },
            {
              "name": "RHSA-2017:1220",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:1220"
            },
            {
              "name": "RHSA-2017:3047",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:3047"
            },
            {
              "name": "[oss-security] 20161205 Re: CVE Request: zlib security issues found during audit",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2016/12/05/21"
            },
            {
              "name": "95131",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/95131"
            },
            {
              "name": "RHSA-2017:3046",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:3046"
            },
            {
              "name": "openSUSE-SU-2017:0077",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html"
            },
            {
              "name": "GLSA-201701-56",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "https://security.gentoo.org/glsa/201701-56"
            },
            {
              "name": "1039427",
              "tags": [
                "vdb-entry",
                "x_refsource_SECTRACK"
              ],
              "url": "http://www.securitytracker.com/id/1039427"
            },
            {
              "name": "RHSA-2017:1222",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:1222"
            },
            {
              "name": "openSUSE-SU-2017:0080",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html"
            },
            {
              "name": "RHSA-2017:3453",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:3453"
            },
            {
              "name": "openSUSE-SU-2016:3202",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html"
            },
            {
              "name": "RHSA-2017:2999",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:2999"
            },
            {
              "name": "[debian-lts-announce] 20190324 [SECURITY] [DLA 1725-1] rsync security update",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html"
            },
            {
              "name": "USN-4246-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "https://usn.ubuntu.com/4246-1/"
            },
            {
              "name": "[debian-lts-announce] 20200129 [SECURITY] [DLA 2085-1] zlib security update",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html"
            },
            {
              "name": "USN-4292-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "https://usn.ubuntu.com/4292-1/"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://support.apple.com/HT208144"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://support.apple.com/HT208113"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://support.apple.com/HT208112"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://support.apple.com/HT208115"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf"
            },
            {
              "name": "GLSA-202007-54",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "https://security.gentoo.org/glsa/202007-54"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "security@microfocus.com",
              "ID": "CVE-2016-9840",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "RHSA-2017:1221",
                  "refsource": "REDHAT",
                  "url": "https://access.redhat.com/errata/RHSA-2017:1221"
                },
                {
                  "name": "RHSA-2017:1220",
                  "refsource": "REDHAT",
                  "url": "https://access.redhat.com/errata/RHSA-2017:1220"
                },
                {
                  "name": "RHSA-2017:3047",
                  "refsource": "REDHAT",
                  "url": "https://access.redhat.com/errata/RHSA-2017:3047"
                },
                {
                  "name": "[oss-security] 20161205 Re: CVE Request: zlib security issues found during audit",
                  "refsource": "MLIST",
                  "url": "http://www.openwall.com/lists/oss-security/2016/12/05/21"
                },
                {
                  "name": "95131",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/95131"
                },
                {
                  "name": "RHSA-2017:3046",
                  "refsource": "REDHAT",
                  "url": "https://access.redhat.com/errata/RHSA-2017:3046"
                },
                {
                  "name": "openSUSE-SU-2017:0077",
                  "refsource": "SUSE",
                  "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html"
                },
                {
                  "name": "GLSA-201701-56",
                  "refsource": "GENTOO",
                  "url": "https://security.gentoo.org/glsa/201701-56"
                },
                {
                  "name": "1039427",
                  "refsource": "SECTRACK",
                  "url": "http://www.securitytracker.com/id/1039427"
                },
                {
                  "name": "RHSA-2017:1222",
                  "refsource": "REDHAT",
                  "url": "https://access.redhat.com/errata/RHSA-2017:1222"
                },
                {
                  "name": "openSUSE-SU-2017:0080",
                  "refsource": "SUSE",
                  "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html"
                },
                {
                  "name": "RHSA-2017:3453",
                  "refsource": "REDHAT",
                  "url": "https://access.redhat.com/errata/RHSA-2017:3453"
                },
                {
                  "name": "openSUSE-SU-2016:3202",
                  "refsource": "SUSE",
                  "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html"
                },
                {
                  "name": "RHSA-2017:2999",
                  "refsource": "REDHAT",
                  "url": "https://access.redhat.com/errata/RHSA-2017:2999"
                },
                {
                  "name": "[debian-lts-announce] 20190324 [SECURITY] [DLA 1725-1] rsync security update",
                  "refsource": "MLIST",
                  "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html"
                },
                {
                  "name": "USN-4246-1",
                  "refsource": "UBUNTU",
                  "url": "https://usn.ubuntu.com/4246-1/"
                },
                {
                  "name": "[debian-lts-announce] 20200129 [SECURITY] [DLA 2085-1] zlib security update",
                  "refsource": "MLIST",
                  "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html"
                },
                {
                  "name": "USN-4292-1",
                  "refsource": "UBUNTU",
                  "url": "https://usn.ubuntu.com/4292-1/"
                },
                {
                  "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
                  "refsource": "CONFIRM",
                  "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
                },
                {
                  "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
                  "refsource": "MISC",
                  "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
                },
                {
                  "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
                  "refsource": "CONFIRM",
                  "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
                },
                {
                  "name": "https://support.apple.com/HT208144",
                  "refsource": "CONFIRM",
                  "url": "https://support.apple.com/HT208144"
                },
                {
                  "name": "https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0",
                  "refsource": "CONFIRM",
                  "url": "https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0"
                },
                {
                  "name": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib",
                  "refsource": "MISC",
                  "url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib"
                },
                {
                  "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345",
                  "refsource": "CONFIRM",
                  "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345"
                },
                {
                  "name": "https://support.apple.com/HT208113",
                  "refsource": "CONFIRM",
                  "url": "https://support.apple.com/HT208113"
                },
                {
                  "name": "https://support.apple.com/HT208112",
                  "refsource": "CONFIRM",
                  "url": "https://support.apple.com/HT208112"
                },
                {
                  "name": "https://support.apple.com/HT208115",
                  "refsource": "CONFIRM",
                  "url": "https://support.apple.com/HT208115"
                },
                {
                  "name": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf",
                  "refsource": "MISC",
                  "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf"
                },
                {
                  "name": "GLSA-202007-54",
                  "refsource": "GENTOO",
                  "url": "https://security.gentoo.org/glsa/202007-54"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84",
        "assignerShortName": "microfocus",
        "cveId": "CVE-2016-9840",
        "datePublished": "2017-05-23T03:56:00.000Z",
        "dateReserved": "2016-12-05T00:00:00.000Z",
        "dateUpdated": "2024-08-06T02:59:03.590Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2013-0252 (GCVE-0-2013-0252)

    Vulnerability from nvd – Published: 2013-03-12 21:00 – Updated: 2024-08-06 14:18
    VLAI
    Summary
    boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    Date Public
    2012-11-27 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T14:18:09.643Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "FEDORA-2013-2448",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099122.html"
              },
              {
                "name": "57675",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/57675"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699649"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=907481"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://svn.boost.org/trac/boost/ticket/7743"
              },
              {
                "name": "[oss-security] 20130203 Re: CVE id request: boost",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2013/02/04/2"
              },
              {
                "name": "FEDORA-2013-2420",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099103.html"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699650"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.boost.org/users/news/boost_locale_security_notice.html"
              },
              {
                "name": "USN-1727-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "http://www.ubuntu.com/usn/USN-1727-1"
              },
              {
                "name": "MDVSA-2013:065",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:065"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2012-11-27T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2013-12-02T13:57:00.000Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "FEDORA-2013-2448",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099122.html"
            },
            {
              "name": "57675",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/57675"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699649"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=907481"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://svn.boost.org/trac/boost/ticket/7743"
            },
            {
              "name": "[oss-security] 20130203 Re: CVE id request: boost",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2013/02/04/2"
            },
            {
              "name": "FEDORA-2013-2420",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099103.html"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699650"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.boost.org/users/news/boost_locale_security_notice.html"
            },
            {
              "name": "USN-1727-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "http://www.ubuntu.com/usn/USN-1727-1"
            },
            {
              "name": "MDVSA-2013:065",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:065"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2013-0252",
        "datePublished": "2013-03-12T21:00:00.000Z",
        "dateReserved": "2012-12-06T00:00:00.000Z",
        "dateUpdated": "2024-08-06T14:18:09.643Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2008-0172 (GCVE-0-2008-0172)

    Vulnerability from nvd – Published: 2008-01-17 22:00 – Updated: 2024-08-07 07:39
    VLAI
    Summary
    The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (NULL dereference and crash) via an invalid regular expression.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://wiki.rpath.com/Advisories:rPSA-2008-0063 x_refsource_CONFIRM
    http://secunia.com/advisories/48099 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2008/0249 vdb-entryx_refsource_VUPEN
    http://www.securityfocus.com/bid/27325 vdb-entryx_refsource_BID
    http://secunia.com/advisories/28860 third-party-advisoryx_refsource_SECUNIA
    http://svn.boost.org/trac/boost/changeset/42745 x_refsource_CONFIRM
    http://secunia.com/advisories/28943 third-party-advisoryx_refsource_SECUNIA
    http://svn.boost.org/trac/boost/changeset/42674 x_refsource_CONFIRM
    https://issues.rpath.com/browse/RPL-2143 x_refsource_CONFIRM
    https://www.redhat.com/archives/fedora-package-an… vendor-advisoryx_refsource_FEDORA
    http://secunia.com/advisories/28511 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/archive/1/488102/100… mailing-listx_refsource_BUGTRAQ
    http://secunia.com/advisories/28705 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/28545 third-party-advisoryx_refsource_SECUNIA
    http://lists.opensuse.org/opensuse-security-annou… vendor-advisoryx_refsource_SUSE
    http://www.gentoo.org/security/en/glsa/glsa-20080… vendor-advisoryx_refsource_GENTOO
    http://secunia.com/advisories/28527 third-party-advisoryx_refsource_SECUNIA
    http://www.ubuntu.com/usn/usn-570-1 vendor-advisoryx_refsource_UBUNTU
    http://secunia.com/advisories/29323 third-party-advisoryx_refsource_SECUNIA
    http://bugs.gentoo.org/show_bug.cgi?id=205955 x_refsource_CONFIRM
    http://www.mandriva.com/en/security/advisories?na… vendor-advisoryx_refsource_MANDRIVA
    Date Public
    2008-01-11 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T07:39:32.901Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0063"
              },
              {
                "name": "48099",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/48099"
              },
              {
                "name": "ADV-2008-0249",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2008/0249"
              },
              {
                "name": "27325",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/27325"
              },
              {
                "name": "28860",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28860"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://svn.boost.org/trac/boost/changeset/42745"
              },
              {
                "name": "28943",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28943"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://svn.boost.org/trac/boost/changeset/42674"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://issues.rpath.com/browse/RPL-2143"
              },
              {
                "name": "FEDORA-2008-0880",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html"
              },
              {
                "name": "28511",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28511"
              },
              {
                "name": "20080213 rPSA-2008-0063-1 boost",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/488102/100/0/threaded"
              },
              {
                "name": "28705",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28705"
              },
              {
                "name": "28545",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28545"
              },
              {
                "name": "SUSE-SR:2008:006",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html"
              },
              {
                "name": "GLSA-200802-08",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml"
              },
              {
                "name": "28527",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28527"
              },
              {
                "name": "USN-570-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "http://www.ubuntu.com/usn/usn-570-1"
              },
              {
                "name": "29323",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/29323"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://bugs.gentoo.org/show_bug.cgi?id=205955"
              },
              {
                "name": "MDVSA-2008:032",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2008-01-11T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (NULL dereference and crash) via an invalid regular expression."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-10-15T20:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0063"
            },
            {
              "name": "48099",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/48099"
            },
            {
              "name": "ADV-2008-0249",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2008/0249"
            },
            {
              "name": "27325",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/27325"
            },
            {
              "name": "28860",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28860"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://svn.boost.org/trac/boost/changeset/42745"
            },
            {
              "name": "28943",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28943"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://svn.boost.org/trac/boost/changeset/42674"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://issues.rpath.com/browse/RPL-2143"
            },
            {
              "name": "FEDORA-2008-0880",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html"
            },
            {
              "name": "28511",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28511"
            },
            {
              "name": "20080213 rPSA-2008-0063-1 boost",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/488102/100/0/threaded"
            },
            {
              "name": "28705",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28705"
            },
            {
              "name": "28545",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28545"
            },
            {
              "name": "SUSE-SR:2008:006",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html"
            },
            {
              "name": "GLSA-200802-08",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml"
            },
            {
              "name": "28527",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28527"
            },
            {
              "name": "USN-570-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "http://www.ubuntu.com/usn/usn-570-1"
            },
            {
              "name": "29323",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/29323"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=205955"
            },
            {
              "name": "MDVSA-2008:032",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2008-0172",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (NULL dereference and crash) via an invalid regular expression."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0063",
                  "refsource": "CONFIRM",
                  "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0063"
                },
                {
                  "name": "48099",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/48099"
                },
                {
                  "name": "ADV-2008-0249",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2008/0249"
                },
                {
                  "name": "27325",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/27325"
                },
                {
                  "name": "28860",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28860"
                },
                {
                  "name": "http://svn.boost.org/trac/boost/changeset/42745",
                  "refsource": "CONFIRM",
                  "url": "http://svn.boost.org/trac/boost/changeset/42745"
                },
                {
                  "name": "28943",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28943"
                },
                {
                  "name": "http://svn.boost.org/trac/boost/changeset/42674",
                  "refsource": "CONFIRM",
                  "url": "http://svn.boost.org/trac/boost/changeset/42674"
                },
                {
                  "name": "https://issues.rpath.com/browse/RPL-2143",
                  "refsource": "CONFIRM",
                  "url": "https://issues.rpath.com/browse/RPL-2143"
                },
                {
                  "name": "FEDORA-2008-0880",
                  "refsource": "FEDORA",
                  "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html"
                },
                {
                  "name": "28511",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28511"
                },
                {
                  "name": "20080213 rPSA-2008-0063-1 boost",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/488102/100/0/threaded"
                },
                {
                  "name": "28705",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28705"
                },
                {
                  "name": "28545",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28545"
                },
                {
                  "name": "SUSE-SR:2008:006",
                  "refsource": "SUSE",
                  "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html"
                },
                {
                  "name": "GLSA-200802-08",
                  "refsource": "GENTOO",
                  "url": "http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml"
                },
                {
                  "name": "28527",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28527"
                },
                {
                  "name": "USN-570-1",
                  "refsource": "UBUNTU",
                  "url": "http://www.ubuntu.com/usn/usn-570-1"
                },
                {
                  "name": "29323",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/29323"
                },
                {
                  "name": "http://bugs.gentoo.org/show_bug.cgi?id=205955",
                  "refsource": "CONFIRM",
                  "url": "http://bugs.gentoo.org/show_bug.cgi?id=205955"
                },
                {
                  "name": "MDVSA-2008:032",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2008-0172",
        "datePublished": "2008-01-17T22:00:00.000Z",
        "dateReserved": "2008-01-09T00:00:00.000Z",
        "dateUpdated": "2024-08-07T07:39:32.901Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2008-0171 (GCVE-0-2008-0171)

    Vulnerability from nvd – Published: 2008-01-17 22:00 – Updated: 2024-08-07 07:39
    VLAI
    Summary
    regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://wiki.rpath.com/Advisories:rPSA-2008-0063 x_refsource_CONFIRM
    http://secunia.com/advisories/48099 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2008/0249 vdb-entryx_refsource_VUPEN
    http://www.securityfocus.com/bid/27325 vdb-entryx_refsource_BID
    http://secunia.com/advisories/28860 third-party-advisoryx_refsource_SECUNIA
    http://svn.boost.org/trac/boost/changeset/42745 x_refsource_CONFIRM
    http://secunia.com/advisories/28943 third-party-advisoryx_refsource_SECUNIA
    http://svn.boost.org/trac/boost/changeset/42674 x_refsource_CONFIRM
    https://issues.rpath.com/browse/RPL-2143 x_refsource_CONFIRM
    https://www.redhat.com/archives/fedora-package-an… vendor-advisoryx_refsource_FEDORA
    http://secunia.com/advisories/28511 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/archive/1/488102/100… mailing-listx_refsource_BUGTRAQ
    http://secunia.com/advisories/28705 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/28545 third-party-advisoryx_refsource_SECUNIA
    http://lists.opensuse.org/opensuse-security-annou… vendor-advisoryx_refsource_SUSE
    http://www.gentoo.org/security/en/glsa/glsa-20080… vendor-advisoryx_refsource_GENTOO
    http://secunia.com/advisories/28527 third-party-advisoryx_refsource_SECUNIA
    http://www.ubuntu.com/usn/usn-570-1 vendor-advisoryx_refsource_UBUNTU
    http://secunia.com/advisories/29323 third-party-advisoryx_refsource_SECUNIA
    http://bugs.gentoo.org/show_bug.cgi?id=205955 x_refsource_CONFIRM
    http://www.mandriva.com/en/security/advisories?na… vendor-advisoryx_refsource_MANDRIVA
    Date Public
    2008-01-11 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T07:39:32.914Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0063"
              },
              {
                "name": "48099",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/48099"
              },
              {
                "name": "ADV-2008-0249",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2008/0249"
              },
              {
                "name": "27325",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/27325"
              },
              {
                "name": "28860",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28860"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://svn.boost.org/trac/boost/changeset/42745"
              },
              {
                "name": "28943",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28943"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://svn.boost.org/trac/boost/changeset/42674"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://issues.rpath.com/browse/RPL-2143"
              },
              {
                "name": "FEDORA-2008-0880",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html"
              },
              {
                "name": "28511",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28511"
              },
              {
                "name": "20080213 rPSA-2008-0063-1 boost",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/488102/100/0/threaded"
              },
              {
                "name": "28705",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28705"
              },
              {
                "name": "28545",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28545"
              },
              {
                "name": "SUSE-SR:2008:006",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html"
              },
              {
                "name": "GLSA-200802-08",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml"
              },
              {
                "name": "28527",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28527"
              },
              {
                "name": "USN-570-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "http://www.ubuntu.com/usn/usn-570-1"
              },
              {
                "name": "29323",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/29323"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://bugs.gentoo.org/show_bug.cgi?id=205955"
              },
              {
                "name": "MDVSA-2008:032",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2008-01-11T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-10-15T20:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0063"
            },
            {
              "name": "48099",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/48099"
            },
            {
              "name": "ADV-2008-0249",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2008/0249"
            },
            {
              "name": "27325",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/27325"
            },
            {
              "name": "28860",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28860"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://svn.boost.org/trac/boost/changeset/42745"
            },
            {
              "name": "28943",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28943"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://svn.boost.org/trac/boost/changeset/42674"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://issues.rpath.com/browse/RPL-2143"
            },
            {
              "name": "FEDORA-2008-0880",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html"
            },
            {
              "name": "28511",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28511"
            },
            {
              "name": "20080213 rPSA-2008-0063-1 boost",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/488102/100/0/threaded"
            },
            {
              "name": "28705",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28705"
            },
            {
              "name": "28545",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28545"
            },
            {
              "name": "SUSE-SR:2008:006",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html"
            },
            {
              "name": "GLSA-200802-08",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml"
            },
            {
              "name": "28527",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28527"
            },
            {
              "name": "USN-570-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "http://www.ubuntu.com/usn/usn-570-1"
            },
            {
              "name": "29323",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/29323"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=205955"
            },
            {
              "name": "MDVSA-2008:032",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2008-0171",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0063",
                  "refsource": "CONFIRM",
                  "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0063"
                },
                {
                  "name": "48099",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/48099"
                },
                {
                  "name": "ADV-2008-0249",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2008/0249"
                },
                {
                  "name": "27325",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/27325"
                },
                {
                  "name": "28860",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28860"
                },
                {
                  "name": "http://svn.boost.org/trac/boost/changeset/42745",
                  "refsource": "CONFIRM",
                  "url": "http://svn.boost.org/trac/boost/changeset/42745"
                },
                {
                  "name": "28943",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28943"
                },
                {
                  "name": "http://svn.boost.org/trac/boost/changeset/42674",
                  "refsource": "CONFIRM",
                  "url": "http://svn.boost.org/trac/boost/changeset/42674"
                },
                {
                  "name": "https://issues.rpath.com/browse/RPL-2143",
                  "refsource": "CONFIRM",
                  "url": "https://issues.rpath.com/browse/RPL-2143"
                },
                {
                  "name": "FEDORA-2008-0880",
                  "refsource": "FEDORA",
                  "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html"
                },
                {
                  "name": "28511",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28511"
                },
                {
                  "name": "20080213 rPSA-2008-0063-1 boost",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/488102/100/0/threaded"
                },
                {
                  "name": "28705",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28705"
                },
                {
                  "name": "28545",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28545"
                },
                {
                  "name": "SUSE-SR:2008:006",
                  "refsource": "SUSE",
                  "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html"
                },
                {
                  "name": "GLSA-200802-08",
                  "refsource": "GENTOO",
                  "url": "http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml"
                },
                {
                  "name": "28527",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28527"
                },
                {
                  "name": "USN-570-1",
                  "refsource": "UBUNTU",
                  "url": "http://www.ubuntu.com/usn/usn-570-1"
                },
                {
                  "name": "29323",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/29323"
                },
                {
                  "name": "http://bugs.gentoo.org/show_bug.cgi?id=205955",
                  "refsource": "CONFIRM",
                  "url": "http://bugs.gentoo.org/show_bug.cgi?id=205955"
                },
                {
                  "name": "MDVSA-2008:032",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2008-0171",
        "datePublished": "2008-01-17T22:00:00.000Z",
        "dateReserved": "2008-01-09T00:00:00.000Z",
        "dateUpdated": "2024-08-07T07:39:32.914Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2016-9840 (GCVE-0-2016-9840)

    Vulnerability from cvelistv5 – Published: 2017-05-23 03:56 – Updated: 2024-08-06 02:59
    VLAI
    Summary
    inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    https://access.redhat.com/errata/RHSA-2017:1221 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2017:1220 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2017:3047 vendor-advisoryx_refsource_REDHAT
    http://www.openwall.com/lists/oss-security/2016/1… mailing-listx_refsource_MLIST
    http://www.securityfocus.com/bid/95131 vdb-entryx_refsource_BID
    https://access.redhat.com/errata/RHSA-2017:3046 vendor-advisoryx_refsource_REDHAT
    http://lists.opensuse.org/opensuse-updates/2017-0… vendor-advisoryx_refsource_SUSE
    https://security.gentoo.org/glsa/201701-56 vendor-advisoryx_refsource_GENTOO
    http://www.securitytracker.com/id/1039427 vdb-entryx_refsource_SECTRACK
    https://access.redhat.com/errata/RHSA-2017:1222 vendor-advisoryx_refsource_REDHAT
    http://lists.opensuse.org/opensuse-updates/2017-0… vendor-advisoryx_refsource_SUSE
    https://access.redhat.com/errata/RHSA-2017:3453 vendor-advisoryx_refsource_REDHAT
    http://lists.opensuse.org/opensuse-updates/2016-1… vendor-advisoryx_refsource_SUSE
    https://access.redhat.com/errata/RHSA-2017:2999 vendor-advisoryx_refsource_REDHAT
    https://lists.debian.org/debian-lts-announce/2019… mailing-listx_refsource_MLIST
    https://usn.ubuntu.com/4246-1/ vendor-advisoryx_refsource_UBUNTU
    https://lists.debian.org/debian-lts-announce/2020… mailing-listx_refsource_MLIST
    https://usn.ubuntu.com/4292-1/ vendor-advisoryx_refsource_UBUNTU
    http://www.oracle.com/technetwork/security-adviso… x_refsource_CONFIRM
    https://www.oracle.com/security-alerts/cpujul2020.html x_refsource_MISC
    http://www.oracle.com/technetwork/security-adviso… x_refsource_CONFIRM
    https://support.apple.com/HT208144 x_refsource_CONFIRM
    https://github.com/madler/zlib/commit/6a043145ca6… x_refsource_CONFIRM
    https://wiki.mozilla.org/MOSS/Secure_Open_Source/… x_refsource_MISC
    https://bugzilla.redhat.com/show_bug.cgi?id=1402345 x_refsource_CONFIRM
    https://support.apple.com/HT208113 x_refsource_CONFIRM
    https://support.apple.com/HT208112 x_refsource_CONFIRM
    https://support.apple.com/HT208115 x_refsource_CONFIRM
    https://wiki.mozilla.org/images/0/09/Zlib-report.pdf x_refsource_MISC
    https://security.gentoo.org/glsa/202007-54 vendor-advisoryx_refsource_GENTOO
    Date Public
    2016-09-30 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T02:59:03.590Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "RHSA-2017:1221",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2017:1221"
              },
              {
                "name": "RHSA-2017:1220",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2017:1220"
              },
              {
                "name": "RHSA-2017:3047",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2017:3047"
              },
              {
                "name": "[oss-security] 20161205 Re: CVE Request: zlib security issues found during audit",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2016/12/05/21"
              },
              {
                "name": "95131",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/95131"
              },
              {
                "name": "RHSA-2017:3046",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2017:3046"
              },
              {
                "name": "openSUSE-SU-2017:0077",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html"
              },
              {
                "name": "GLSA-201701-56",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "https://security.gentoo.org/glsa/201701-56"
              },
              {
                "name": "1039427",
                "tags": [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
                  "x_transferred"
                ],
                "url": "http://www.securitytracker.com/id/1039427"
              },
              {
                "name": "RHSA-2017:1222",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2017:1222"
              },
              {
                "name": "openSUSE-SU-2017:0080",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html"
              },
              {
                "name": "RHSA-2017:3453",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2017:3453"
              },
              {
                "name": "openSUSE-SU-2016:3202",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html"
              },
              {
                "name": "RHSA-2017:2999",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2017:2999"
              },
              {
                "name": "[debian-lts-announce] 20190324 [SECURITY] [DLA 1725-1] rsync security update",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html"
              },
              {
                "name": "USN-4246-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "https://usn.ubuntu.com/4246-1/"
              },
              {
                "name": "[debian-lts-announce] 20200129 [SECURITY] [DLA 2085-1] zlib security update",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html"
              },
              {
                "name": "USN-4292-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "https://usn.ubuntu.com/4292-1/"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://support.apple.com/HT208144"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://support.apple.com/HT208113"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://support.apple.com/HT208112"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://support.apple.com/HT208115"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf"
              },
              {
                "name": "GLSA-202007-54",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "https://security.gentoo.org/glsa/202007-54"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2016-09-30T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2021-01-06T16:16:02.000Z",
            "orgId": "f81092c5-7f14-476d-80dc-24857f90be84",
            "shortName": "microfocus"
          },
          "references": [
            {
              "name": "RHSA-2017:1221",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:1221"
            },
            {
              "name": "RHSA-2017:1220",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:1220"
            },
            {
              "name": "RHSA-2017:3047",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:3047"
            },
            {
              "name": "[oss-security] 20161205 Re: CVE Request: zlib security issues found during audit",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2016/12/05/21"
            },
            {
              "name": "95131",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/95131"
            },
            {
              "name": "RHSA-2017:3046",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:3046"
            },
            {
              "name": "openSUSE-SU-2017:0077",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html"
            },
            {
              "name": "GLSA-201701-56",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "https://security.gentoo.org/glsa/201701-56"
            },
            {
              "name": "1039427",
              "tags": [
                "vdb-entry",
                "x_refsource_SECTRACK"
              ],
              "url": "http://www.securitytracker.com/id/1039427"
            },
            {
              "name": "RHSA-2017:1222",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:1222"
            },
            {
              "name": "openSUSE-SU-2017:0080",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html"
            },
            {
              "name": "RHSA-2017:3453",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:3453"
            },
            {
              "name": "openSUSE-SU-2016:3202",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html"
            },
            {
              "name": "RHSA-2017:2999",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:2999"
            },
            {
              "name": "[debian-lts-announce] 20190324 [SECURITY] [DLA 1725-1] rsync security update",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html"
            },
            {
              "name": "USN-4246-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "https://usn.ubuntu.com/4246-1/"
            },
            {
              "name": "[debian-lts-announce] 20200129 [SECURITY] [DLA 2085-1] zlib security update",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html"
            },
            {
              "name": "USN-4292-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "https://usn.ubuntu.com/4292-1/"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://support.apple.com/HT208144"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://support.apple.com/HT208113"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://support.apple.com/HT208112"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://support.apple.com/HT208115"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf"
            },
            {
              "name": "GLSA-202007-54",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "https://security.gentoo.org/glsa/202007-54"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "security@microfocus.com",
              "ID": "CVE-2016-9840",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "RHSA-2017:1221",
                  "refsource": "REDHAT",
                  "url": "https://access.redhat.com/errata/RHSA-2017:1221"
                },
                {
                  "name": "RHSA-2017:1220",
                  "refsource": "REDHAT",
                  "url": "https://access.redhat.com/errata/RHSA-2017:1220"
                },
                {
                  "name": "RHSA-2017:3047",
                  "refsource": "REDHAT",
                  "url": "https://access.redhat.com/errata/RHSA-2017:3047"
                },
                {
                  "name": "[oss-security] 20161205 Re: CVE Request: zlib security issues found during audit",
                  "refsource": "MLIST",
                  "url": "http://www.openwall.com/lists/oss-security/2016/12/05/21"
                },
                {
                  "name": "95131",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/95131"
                },
                {
                  "name": "RHSA-2017:3046",
                  "refsource": "REDHAT",
                  "url": "https://access.redhat.com/errata/RHSA-2017:3046"
                },
                {
                  "name": "openSUSE-SU-2017:0077",
                  "refsource": "SUSE",
                  "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html"
                },
                {
                  "name": "GLSA-201701-56",
                  "refsource": "GENTOO",
                  "url": "https://security.gentoo.org/glsa/201701-56"
                },
                {
                  "name": "1039427",
                  "refsource": "SECTRACK",
                  "url": "http://www.securitytracker.com/id/1039427"
                },
                {
                  "name": "RHSA-2017:1222",
                  "refsource": "REDHAT",
                  "url": "https://access.redhat.com/errata/RHSA-2017:1222"
                },
                {
                  "name": "openSUSE-SU-2017:0080",
                  "refsource": "SUSE",
                  "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html"
                },
                {
                  "name": "RHSA-2017:3453",
                  "refsource": "REDHAT",
                  "url": "https://access.redhat.com/errata/RHSA-2017:3453"
                },
                {
                  "name": "openSUSE-SU-2016:3202",
                  "refsource": "SUSE",
                  "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html"
                },
                {
                  "name": "RHSA-2017:2999",
                  "refsource": "REDHAT",
                  "url": "https://access.redhat.com/errata/RHSA-2017:2999"
                },
                {
                  "name": "[debian-lts-announce] 20190324 [SECURITY] [DLA 1725-1] rsync security update",
                  "refsource": "MLIST",
                  "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html"
                },
                {
                  "name": "USN-4246-1",
                  "refsource": "UBUNTU",
                  "url": "https://usn.ubuntu.com/4246-1/"
                },
                {
                  "name": "[debian-lts-announce] 20200129 [SECURITY] [DLA 2085-1] zlib security update",
                  "refsource": "MLIST",
                  "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html"
                },
                {
                  "name": "USN-4292-1",
                  "refsource": "UBUNTU",
                  "url": "https://usn.ubuntu.com/4292-1/"
                },
                {
                  "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
                  "refsource": "CONFIRM",
                  "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
                },
                {
                  "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
                  "refsource": "MISC",
                  "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
                },
                {
                  "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
                  "refsource": "CONFIRM",
                  "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
                },
                {
                  "name": "https://support.apple.com/HT208144",
                  "refsource": "CONFIRM",
                  "url": "https://support.apple.com/HT208144"
                },
                {
                  "name": "https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0",
                  "refsource": "CONFIRM",
                  "url": "https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0"
                },
                {
                  "name": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib",
                  "refsource": "MISC",
                  "url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib"
                },
                {
                  "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345",
                  "refsource": "CONFIRM",
                  "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345"
                },
                {
                  "name": "https://support.apple.com/HT208113",
                  "refsource": "CONFIRM",
                  "url": "https://support.apple.com/HT208113"
                },
                {
                  "name": "https://support.apple.com/HT208112",
                  "refsource": "CONFIRM",
                  "url": "https://support.apple.com/HT208112"
                },
                {
                  "name": "https://support.apple.com/HT208115",
                  "refsource": "CONFIRM",
                  "url": "https://support.apple.com/HT208115"
                },
                {
                  "name": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf",
                  "refsource": "MISC",
                  "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf"
                },
                {
                  "name": "GLSA-202007-54",
                  "refsource": "GENTOO",
                  "url": "https://security.gentoo.org/glsa/202007-54"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84",
        "assignerShortName": "microfocus",
        "cveId": "CVE-2016-9840",
        "datePublished": "2017-05-23T03:56:00.000Z",
        "dateReserved": "2016-12-05T00:00:00.000Z",
        "dateUpdated": "2024-08-06T02:59:03.590Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2013-0252 (GCVE-0-2013-0252)

    Vulnerability from cvelistv5 – Published: 2013-03-12 21:00 – Updated: 2024-08-06 14:18
    VLAI
    Summary
    boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    Date Public
    2012-11-27 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T14:18:09.643Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "FEDORA-2013-2448",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099122.html"
              },
              {
                "name": "57675",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/57675"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699649"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=907481"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://svn.boost.org/trac/boost/ticket/7743"
              },
              {
                "name": "[oss-security] 20130203 Re: CVE id request: boost",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2013/02/04/2"
              },
              {
                "name": "FEDORA-2013-2420",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099103.html"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699650"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.boost.org/users/news/boost_locale_security_notice.html"
              },
              {
                "name": "USN-1727-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "http://www.ubuntu.com/usn/USN-1727-1"
              },
              {
                "name": "MDVSA-2013:065",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:065"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2012-11-27T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2013-12-02T13:57:00.000Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "FEDORA-2013-2448",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099122.html"
            },
            {
              "name": "57675",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/57675"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699649"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=907481"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://svn.boost.org/trac/boost/ticket/7743"
            },
            {
              "name": "[oss-security] 20130203 Re: CVE id request: boost",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2013/02/04/2"
            },
            {
              "name": "FEDORA-2013-2420",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099103.html"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699650"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.boost.org/users/news/boost_locale_security_notice.html"
            },
            {
              "name": "USN-1727-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "http://www.ubuntu.com/usn/USN-1727-1"
            },
            {
              "name": "MDVSA-2013:065",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:065"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2013-0252",
        "datePublished": "2013-03-12T21:00:00.000Z",
        "dateReserved": "2012-12-06T00:00:00.000Z",
        "dateUpdated": "2024-08-06T14:18:09.643Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2008-0172 (GCVE-0-2008-0172)

    Vulnerability from cvelistv5 – Published: 2008-01-17 22:00 – Updated: 2024-08-07 07:39
    VLAI
    Summary
    The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (NULL dereference and crash) via an invalid regular expression.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://wiki.rpath.com/Advisories:rPSA-2008-0063 x_refsource_CONFIRM
    http://secunia.com/advisories/48099 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2008/0249 vdb-entryx_refsource_VUPEN
    http://www.securityfocus.com/bid/27325 vdb-entryx_refsource_BID
    http://secunia.com/advisories/28860 third-party-advisoryx_refsource_SECUNIA
    http://svn.boost.org/trac/boost/changeset/42745 x_refsource_CONFIRM
    http://secunia.com/advisories/28943 third-party-advisoryx_refsource_SECUNIA
    http://svn.boost.org/trac/boost/changeset/42674 x_refsource_CONFIRM
    https://issues.rpath.com/browse/RPL-2143 x_refsource_CONFIRM
    https://www.redhat.com/archives/fedora-package-an… vendor-advisoryx_refsource_FEDORA
    http://secunia.com/advisories/28511 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/archive/1/488102/100… mailing-listx_refsource_BUGTRAQ
    http://secunia.com/advisories/28705 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/28545 third-party-advisoryx_refsource_SECUNIA
    http://lists.opensuse.org/opensuse-security-annou… vendor-advisoryx_refsource_SUSE
    http://www.gentoo.org/security/en/glsa/glsa-20080… vendor-advisoryx_refsource_GENTOO
    http://secunia.com/advisories/28527 third-party-advisoryx_refsource_SECUNIA
    http://www.ubuntu.com/usn/usn-570-1 vendor-advisoryx_refsource_UBUNTU
    http://secunia.com/advisories/29323 third-party-advisoryx_refsource_SECUNIA
    http://bugs.gentoo.org/show_bug.cgi?id=205955 x_refsource_CONFIRM
    http://www.mandriva.com/en/security/advisories?na… vendor-advisoryx_refsource_MANDRIVA
    Date Public
    2008-01-11 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T07:39:32.901Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0063"
              },
              {
                "name": "48099",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/48099"
              },
              {
                "name": "ADV-2008-0249",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2008/0249"
              },
              {
                "name": "27325",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/27325"
              },
              {
                "name": "28860",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28860"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://svn.boost.org/trac/boost/changeset/42745"
              },
              {
                "name": "28943",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28943"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://svn.boost.org/trac/boost/changeset/42674"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://issues.rpath.com/browse/RPL-2143"
              },
              {
                "name": "FEDORA-2008-0880",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html"
              },
              {
                "name": "28511",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28511"
              },
              {
                "name": "20080213 rPSA-2008-0063-1 boost",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/488102/100/0/threaded"
              },
              {
                "name": "28705",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28705"
              },
              {
                "name": "28545",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28545"
              },
              {
                "name": "SUSE-SR:2008:006",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html"
              },
              {
                "name": "GLSA-200802-08",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml"
              },
              {
                "name": "28527",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28527"
              },
              {
                "name": "USN-570-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "http://www.ubuntu.com/usn/usn-570-1"
              },
              {
                "name": "29323",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/29323"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://bugs.gentoo.org/show_bug.cgi?id=205955"
              },
              {
                "name": "MDVSA-2008:032",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2008-01-11T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (NULL dereference and crash) via an invalid regular expression."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-10-15T20:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0063"
            },
            {
              "name": "48099",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/48099"
            },
            {
              "name": "ADV-2008-0249",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2008/0249"
            },
            {
              "name": "27325",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/27325"
            },
            {
              "name": "28860",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28860"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://svn.boost.org/trac/boost/changeset/42745"
            },
            {
              "name": "28943",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28943"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://svn.boost.org/trac/boost/changeset/42674"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://issues.rpath.com/browse/RPL-2143"
            },
            {
              "name": "FEDORA-2008-0880",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html"
            },
            {
              "name": "28511",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28511"
            },
            {
              "name": "20080213 rPSA-2008-0063-1 boost",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/488102/100/0/threaded"
            },
            {
              "name": "28705",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28705"
            },
            {
              "name": "28545",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28545"
            },
            {
              "name": "SUSE-SR:2008:006",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html"
            },
            {
              "name": "GLSA-200802-08",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml"
            },
            {
              "name": "28527",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28527"
            },
            {
              "name": "USN-570-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "http://www.ubuntu.com/usn/usn-570-1"
            },
            {
              "name": "29323",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/29323"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=205955"
            },
            {
              "name": "MDVSA-2008:032",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2008-0172",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (NULL dereference and crash) via an invalid regular expression."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0063",
                  "refsource": "CONFIRM",
                  "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0063"
                },
                {
                  "name": "48099",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/48099"
                },
                {
                  "name": "ADV-2008-0249",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2008/0249"
                },
                {
                  "name": "27325",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/27325"
                },
                {
                  "name": "28860",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28860"
                },
                {
                  "name": "http://svn.boost.org/trac/boost/changeset/42745",
                  "refsource": "CONFIRM",
                  "url": "http://svn.boost.org/trac/boost/changeset/42745"
                },
                {
                  "name": "28943",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28943"
                },
                {
                  "name": "http://svn.boost.org/trac/boost/changeset/42674",
                  "refsource": "CONFIRM",
                  "url": "http://svn.boost.org/trac/boost/changeset/42674"
                },
                {
                  "name": "https://issues.rpath.com/browse/RPL-2143",
                  "refsource": "CONFIRM",
                  "url": "https://issues.rpath.com/browse/RPL-2143"
                },
                {
                  "name": "FEDORA-2008-0880",
                  "refsource": "FEDORA",
                  "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html"
                },
                {
                  "name": "28511",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28511"
                },
                {
                  "name": "20080213 rPSA-2008-0063-1 boost",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/488102/100/0/threaded"
                },
                {
                  "name": "28705",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28705"
                },
                {
                  "name": "28545",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28545"
                },
                {
                  "name": "SUSE-SR:2008:006",
                  "refsource": "SUSE",
                  "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html"
                },
                {
                  "name": "GLSA-200802-08",
                  "refsource": "GENTOO",
                  "url": "http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml"
                },
                {
                  "name": "28527",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28527"
                },
                {
                  "name": "USN-570-1",
                  "refsource": "UBUNTU",
                  "url": "http://www.ubuntu.com/usn/usn-570-1"
                },
                {
                  "name": "29323",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/29323"
                },
                {
                  "name": "http://bugs.gentoo.org/show_bug.cgi?id=205955",
                  "refsource": "CONFIRM",
                  "url": "http://bugs.gentoo.org/show_bug.cgi?id=205955"
                },
                {
                  "name": "MDVSA-2008:032",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2008-0172",
        "datePublished": "2008-01-17T22:00:00.000Z",
        "dateReserved": "2008-01-09T00:00:00.000Z",
        "dateUpdated": "2024-08-07T07:39:32.901Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2008-0171 (GCVE-0-2008-0171)

    Vulnerability from cvelistv5 – Published: 2008-01-17 22:00 – Updated: 2024-08-07 07:39
    VLAI
    Summary
    regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://wiki.rpath.com/Advisories:rPSA-2008-0063 x_refsource_CONFIRM
    http://secunia.com/advisories/48099 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2008/0249 vdb-entryx_refsource_VUPEN
    http://www.securityfocus.com/bid/27325 vdb-entryx_refsource_BID
    http://secunia.com/advisories/28860 third-party-advisoryx_refsource_SECUNIA
    http://svn.boost.org/trac/boost/changeset/42745 x_refsource_CONFIRM
    http://secunia.com/advisories/28943 third-party-advisoryx_refsource_SECUNIA
    http://svn.boost.org/trac/boost/changeset/42674 x_refsource_CONFIRM
    https://issues.rpath.com/browse/RPL-2143 x_refsource_CONFIRM
    https://www.redhat.com/archives/fedora-package-an… vendor-advisoryx_refsource_FEDORA
    http://secunia.com/advisories/28511 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/archive/1/488102/100… mailing-listx_refsource_BUGTRAQ
    http://secunia.com/advisories/28705 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/28545 third-party-advisoryx_refsource_SECUNIA
    http://lists.opensuse.org/opensuse-security-annou… vendor-advisoryx_refsource_SUSE
    http://www.gentoo.org/security/en/glsa/glsa-20080… vendor-advisoryx_refsource_GENTOO
    http://secunia.com/advisories/28527 third-party-advisoryx_refsource_SECUNIA
    http://www.ubuntu.com/usn/usn-570-1 vendor-advisoryx_refsource_UBUNTU
    http://secunia.com/advisories/29323 third-party-advisoryx_refsource_SECUNIA
    http://bugs.gentoo.org/show_bug.cgi?id=205955 x_refsource_CONFIRM
    http://www.mandriva.com/en/security/advisories?na… vendor-advisoryx_refsource_MANDRIVA
    Date Public
    2008-01-11 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T07:39:32.914Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0063"
              },
              {
                "name": "48099",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/48099"
              },
              {
                "name": "ADV-2008-0249",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2008/0249"
              },
              {
                "name": "27325",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/27325"
              },
              {
                "name": "28860",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28860"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://svn.boost.org/trac/boost/changeset/42745"
              },
              {
                "name": "28943",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28943"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://svn.boost.org/trac/boost/changeset/42674"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://issues.rpath.com/browse/RPL-2143"
              },
              {
                "name": "FEDORA-2008-0880",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html"
              },
              {
                "name": "28511",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28511"
              },
              {
                "name": "20080213 rPSA-2008-0063-1 boost",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/488102/100/0/threaded"
              },
              {
                "name": "28705",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28705"
              },
              {
                "name": "28545",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28545"
              },
              {
                "name": "SUSE-SR:2008:006",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html"
              },
              {
                "name": "GLSA-200802-08",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml"
              },
              {
                "name": "28527",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/28527"
              },
              {
                "name": "USN-570-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "http://www.ubuntu.com/usn/usn-570-1"
              },
              {
                "name": "29323",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/29323"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://bugs.gentoo.org/show_bug.cgi?id=205955"
              },
              {
                "name": "MDVSA-2008:032",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2008-01-11T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-10-15T20:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0063"
            },
            {
              "name": "48099",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/48099"
            },
            {
              "name": "ADV-2008-0249",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2008/0249"
            },
            {
              "name": "27325",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/27325"
            },
            {
              "name": "28860",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28860"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://svn.boost.org/trac/boost/changeset/42745"
            },
            {
              "name": "28943",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28943"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://svn.boost.org/trac/boost/changeset/42674"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://issues.rpath.com/browse/RPL-2143"
            },
            {
              "name": "FEDORA-2008-0880",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html"
            },
            {
              "name": "28511",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28511"
            },
            {
              "name": "20080213 rPSA-2008-0063-1 boost",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/488102/100/0/threaded"
            },
            {
              "name": "28705",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28705"
            },
            {
              "name": "28545",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28545"
            },
            {
              "name": "SUSE-SR:2008:006",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html"
            },
            {
              "name": "GLSA-200802-08",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml"
            },
            {
              "name": "28527",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/28527"
            },
            {
              "name": "USN-570-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "http://www.ubuntu.com/usn/usn-570-1"
            },
            {
              "name": "29323",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/29323"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=205955"
            },
            {
              "name": "MDVSA-2008:032",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2008-0171",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0063",
                  "refsource": "CONFIRM",
                  "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0063"
                },
                {
                  "name": "48099",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/48099"
                },
                {
                  "name": "ADV-2008-0249",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2008/0249"
                },
                {
                  "name": "27325",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/27325"
                },
                {
                  "name": "28860",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28860"
                },
                {
                  "name": "http://svn.boost.org/trac/boost/changeset/42745",
                  "refsource": "CONFIRM",
                  "url": "http://svn.boost.org/trac/boost/changeset/42745"
                },
                {
                  "name": "28943",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28943"
                },
                {
                  "name": "http://svn.boost.org/trac/boost/changeset/42674",
                  "refsource": "CONFIRM",
                  "url": "http://svn.boost.org/trac/boost/changeset/42674"
                },
                {
                  "name": "https://issues.rpath.com/browse/RPL-2143",
                  "refsource": "CONFIRM",
                  "url": "https://issues.rpath.com/browse/RPL-2143"
                },
                {
                  "name": "FEDORA-2008-0880",
                  "refsource": "FEDORA",
                  "url": "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html"
                },
                {
                  "name": "28511",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28511"
                },
                {
                  "name": "20080213 rPSA-2008-0063-1 boost",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/488102/100/0/threaded"
                },
                {
                  "name": "28705",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28705"
                },
                {
                  "name": "28545",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28545"
                },
                {
                  "name": "SUSE-SR:2008:006",
                  "refsource": "SUSE",
                  "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html"
                },
                {
                  "name": "GLSA-200802-08",
                  "refsource": "GENTOO",
                  "url": "http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml"
                },
                {
                  "name": "28527",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/28527"
                },
                {
                  "name": "USN-570-1",
                  "refsource": "UBUNTU",
                  "url": "http://www.ubuntu.com/usn/usn-570-1"
                },
                {
                  "name": "29323",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/29323"
                },
                {
                  "name": "http://bugs.gentoo.org/show_bug.cgi?id=205955",
                  "refsource": "CONFIRM",
                  "url": "http://bugs.gentoo.org/show_bug.cgi?id=205955"
                },
                {
                  "name": "MDVSA-2008:032",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2008-0171",
        "datePublished": "2008-01-17T22:00:00.000Z",
        "dateReserved": "2008-01-09T00:00:00.000Z",
        "dateUpdated": "2024-08-07T07:39:32.914Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }