regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-libs/boost. | Oct 30, 2017 | Jan 17, 2008 |
| Oracle_linux | — | Upgrade boostUpgrade boost-docUpgrade boost-devel | Oct 16, 2024 | Jan 17, 2008 |
| Suse | — | Upgrade libboost_json1_86_0-develUpgrade libboost_graph1_86_0-x86-64-v3Upgrade libboost_python1_36_0-32bitUpgrade libboost_regex1_86_0-x86-64-v3Upgrade libboost_charconv1_86_0Upgrade libboost_locale1_86_0-develUpgrade libboost_serialization1_86_0Upgrade libboost_python1_36_0Upgrade libboost_wave1_36_0-32bitUpgrade libboost_chrono1_86_0Upgrade libboost_thread1_86_0-x86-64-v3Upgrade libboost_math1_36_0Upgrade libboost_regex1_36_0-32bitUpgrade libboost_math1_86_0Upgrade libboost_atomic1_86_0-x86-64-v3Upgrade libboost_date_time1_86_0-develUpgrade libboost_thread1_86_0-develUpgrade libboost_type_erasure1_86_0Upgrade libboost_regex1_86_0Upgrade libboost_thread1_86_0Upgrade libboost_system1_36_0Upgrade boost-docUpgrade libboost_atomic1_86_0Upgrade libboost_system1_86_0-x86-64-v3Upgrade libboost_thread1_36_0Upgrade libboost_filesystem1_36_0Upgrade libboost_headers1_86_0-develUpgrade boost-license1_49_0Upgrade libboost_locale1_86_0-x86-64-v3Upgrade libboost_iostreams1_86_0-develUpgrade libboost_program_options1_36_0-32bitUpgrade libboost_filesystem1_86_0Upgrade libboost_url1_86_0Upgrade libboost_date_time1_86_0Upgrade libboost_nowide1_86_0Upgrade libboost_signals1_36_0Upgrade libboost_wave1_86_0-develUpgrade libboost_serialization1_86_0-x86-64-v3Upgrade libboost_url1_86_0-develUpgrade libboost_serialization1_36_0Upgrade libboost_test1_86_0-x86-64-v3Upgrade libboost_program_options1_86_0Upgrade boost-licenseUpgrade libboost_charconv1_86_0-x86-64-v3Upgrade libboost_signals1_36_0-32bitUpgrade libboost_test1_86_0-develUpgrade libboost_random1_86_0Upgrade libboost_timer1_86_0-develUpgrade libboost_system1_86_0-develUpgrade boost1_86_0-quickbookUpgrade libboost_stacktrace1_86_0-develUpgrade libboost_filesystem1_86_0-develUpgrade libboost_atomic1_86_0-develUpgrade libboost_nowide1_86_0-x86-64-v3Upgrade boost1_86_0-doc-htmlUpgrade libboost_math1_86_0-develUpgrade libboost_date_time1_36_0-32bitUpgrade libboost_regex1_36_0Upgrade libboost_context1_86_0-develUpgrade libboost_chrono1_86_0-develUpgrade libboost_iostreams1_86_0Upgrade libboost_graph1_86_0-develUpgrade libboost_log1_86_0Upgrade libboost_json1_86_0-x86-64-v3Upgrade libboost_graph1_36_0-32bitUpgrade libboost_charconv1_86_0-develUpgrade libboost_regex_legacyUpgrade boost1_86_0-jamUpgrade libboost_regex1_86_0-develUpgrade libboost_test1_36_0-32bitUpgrade libboost_fiber1_86_0Upgrade libboost_container1_86_0-develUpgrade libboost_stacktrace1_86_0-x86-64-v3Upgrade libboost_container1_86_0Upgrade libboost_test1_86_0Upgrade libboost_context1_86_0Upgrade libboost_type_erasure1_86_0-develUpgrade libboost_wave1_86_0Upgrade boost-license1_86_0Upgrade libboost_date_time1_36_0Upgrade libboost_math1_36_0-32bitUpgrade boost-devel-32bitUpgrade libboost_random1_86_0-x86-64-v3Upgrade libboost_filesystem1_36_0-32bitUpgrade libboost_wave1_86_0-x86-64-v3Upgrade libboost_math1_86_0-x86-64-v3Upgrade libboost_json1_86_0Upgrade libboost_timer1_86_0Upgrade libboost_process1_86_0-develUpgrade libboost_process1_86_0Upgrade libboost_iostreams1_36_0-32bitUpgrade libboost_url1_86_0-x86-64-v3Upgrade libboost_program_options1_86_0-develUpgrade libboost_container1_86_0-x86-64-v3Upgrade libboost_thread1_49_0Upgrade boost1_86_0-doc-pdfUpgrade libboost_system1_36_0-32bitUpgrade libboost_nowide1_86_0-develUpgrade libboost_thread1_36_0-32bitUpgrade libboost_random1_86_0-develUpgrade libboost_serialization1_36_0-32bitUpgrade libboost_log1_86_0-develUpgrade libboost_graph1_36_0Upgrade libboost_mpi1_36_0Upgrade libboost_coroutine1_86_0-develUpgrade libboost_locale_legacyUpgrade libboost_wave1_36_0Upgrade libboost_coroutine1_86_0Upgrade libboost_program_options1_86_0-x86-64-v3Upgrade libboost_system1_86_0Upgrade libboost_contract1_86_0-develUpgrade libboost_system1_49_0Upgrade libboost_stacktrace1_86_0Upgrade libboost_filesystem1_86_0-x86-64-v3Upgrade libboost_type_erasure1_86_0-x86-64-v3Upgrade libboost_iostreams1_86_0-x86-64-v3Upgrade libboost_date_time1_86_0-x86-64-v3Upgrade libboost_fiber1_86_0-develUpgrade boost-develUpgrade libboost_serialization1_86_0-develUpgrade libboost_program_options1_36_0Upgrade libboost_graph1_86_0Upgrade libboost_process1_86_0-x86-64-v3Upgrade libboost_locale1_86_0Upgrade libboost_iostreams1_36_0Upgrade libboost_contract1_86_0Upgrade libboost_test1_36_0 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libboost-regex1.34.1Upgrade libboost-regex1.33.1 | Nov 8, 2024 | Jan 17, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub