CVE-2016-6354 Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors i...
CriticalCVSS 9.8
EPSS 9.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/flex(Debian:12) | < 2.6.1-1 | 2.6.1-1 |
| debian/flex(Debian:13) | < 2.6.1-1 | 2.6.1-1 |
| debian/flex(Debian:14) | < 2.6.1-1 | 2.6.1-1 |
| debian linux | = 8.0 | No fix listed |
| westes flex | <= 2.6.0 | No fix listed |
| alpine/flex(Alpine:v3.2) | < 2.5.39-r1 | 2.5.39-r1 |
| alpine/flex(Alpine:v3.3) | < 2.5.39-r3 | 2.5.39-r3 |
| alpine/flex(Alpine:v3.4) | < 2.6.1-r0 | 2.6.1-r0 |
References
- Debian Security Tracker CVE-2016-6354 vendor-advisory
- DSA-3653 third-party-advisory vendor-advisory
- [oss-security] 20160718 CVE request: flex: Buffer overflow in generated code (yy_get_next_buffer) mailing-list release-notes third-party-advisory
- [oss-security] 20160726 Re: CVE request: flex: Buffer overflow in generated code (yy_get_next_buffer) mailing-list release-notes third-party-advisory
- github.com patch
- GLSA-201701-31 vendor-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking