The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade flex | Aug 30, 2017 | Sep 21, 2016 |
| Debian | — | Upgrade flex | Apr 3, 2017 | Aug 25, 2016 |
| Gentoo Linux | — | Upgrade sys-devel/flex.Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Oct 30, 2017 | Sep 21, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade flex | Dec 4, 2019 | Sep 21, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade flex | Sep 25, 2019 | Sep 21, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade flex | Sep 24, 2019 | Sep 21, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 18, 2016 |
| Suse | — | Upgrade bogofilterUpgrade libbonoboUpgrade libbonobo-32bitUpgrade MozillaThunderbird-translations-commonUpgrade perl-Cyrus-IMAPUpgrade flex-32bitUpgrade libkde4Upgrade netpbmUpgrade sgmltoolUpgrade openslp-32bitUpgrade MozillaFirefox-develUpgrade libwsutil8Upgrade libwireshark8Upgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbird-translations-otherUpgrade libksuseinstall1Upgrade libkde4-32bitUpgrade openslp-serverUpgrade libwiretap7Upgrade libQtWebKit-develUpgrade MozillaFirefoxUpgrade libkdecore4Upgrade mdbtoolsUpgrade mozilla-nspr-develUpgrade libbonobo-langUpgrade firefox-fontconfigUpgrade libkdecore4-32bitUpgrade MozillaThunderbirdUpgrade wiresharkUpgrade libbonobo-develUpgrade mozilla-nss-develUpgrade openslpUpgrade libnetpbm-develUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-toolsUpgrade wireshark-develUpgrade MozillaFirefox-translationsUpgrade libnetpbm11Upgrade libksuseinstall1-32bitUpgrade wireshark-gtkUpgrade libQtWebKit4Upgrade MozillaFirefox-translations-otherUpgrade atUpgrade libfreebl3-32bitUpgrade mozilla-nssUpgrade libQtWebKit4-32bitUpgrade perl-Cyrus-SIEVE-managesieveUpgrade mozilla-nss-32bitUpgrade mozilla-nsprUpgrade libwireshark9Upgrade mozilla-nspr-32bitUpgrade libwsutil7Upgrade openslp-develUpgrade MozillaThunderbird-buildsymbolsUpgrade MozillaThunderbird-develUpgrade libwscodecs1Upgrade flexUpgrade libfreebl3Upgrade libnetpbm11-32bitUpgrade libwiretap6Upgrade libbonobo-doc | Sep 21, 2016 | Sep 21, 2016 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 21, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub