CVE-2008-0171 regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash)...
MediumCVSS 5.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| boost | = 1.33 | No fix listed |
| boost | = 1.34 | No fix listed |
| boost regex library | All versions | No fix listed |
References
- bugs.gentoo.org
- SUSE-SR:2008:006 vendor-advisory
- 28511 third-party-advisory
- 28527 third-party-advisory
- 28545 third-party-advisory
- 28705 third-party-advisory
- 28860 third-party-advisory
- 28943 third-party-advisory
- 29323 third-party-advisory
- 48099 third-party-advisory
- svn.boost.org exploit
- svn.boost.org exploit
- wiki.rpath.com
- GLSA-200802-08 vendor-advisory
- MDVSA-2008:032 vendor-advisory
- 20080213 rPSA-2008-0063-1 boost mailing-list
- 27325 vdb-entry
- USN-570-1 vendor-advisory
- ADV-2008-0249 vdb-entry
- issues.rpath.com
- FEDORA-2008-0880 vendor-advisory