Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apachemodphp | — | Upgrade macOS to the latest version | Apr 5, 2017 | Mar 30, 2015 |
| Debian | — | Upgrade newlibUpgrade nviUpgrade vigorUpgrade clamavUpgrade php5Upgrade librcsb-core-wrapper | Jul 30, 2024 | Mar 30, 2015 |
| Freebsd | — | Upgrade clamavUpgrade php55Upgrade php5Upgrade php56Upgrade php53Upgrade clamav-devel | Dec 10, 2025 | May 19, 2015 |
| Hpux | — | Update hpuxws22TOMCAT.TOMCAT to the latest versionUpdate hpuxws22APACHE.WEBPROXY to the latest versionUpdate hpuxws22APCH32.PHP2 to the latest versionUpdate hpuxws22APCH32.MOD_PERL2 to the latest versionUpdate hpuxws22APACHE.MOD_PERL2 to the latest versionUpdate hpuxws22APACHE.APACHE2 to the latest versionUpdate hpuxws22APACHE.AUTH_LDAP to the latest versionUpdate hpuxws22APACHE.MOD_JK2 to the latest versionUpdate hpuxws22APACHE.PHP2 to the latest versionUpdate hpuxws22APACHE.MOD_JK to the latest versionUpdate hpuxws22APCH32.AUTH_LDAP2 to the latest versionUpdate hpuxws22APCH32.APACHE to the latest versionUpdate hpuxws22APACHE.AUTH_LDAP2 to the latest versionUpdate hpuxws22APCH32.PHP to the latest versionUpdate hpuxws22APCH32.AUTH_LDAP to the latest versionUpdate hpuxws22APCH32.WEBPROXY to the latest versionUpdate hpuxws22APCH32.APACHE2 to the latest versionUpdate hpuxws22APACHE.APACHE to the latest versionUpdate hpuxws22APCH32.MOD_JK2 to the latest versionUpdate hpuxws22APACHE.MOD_PERL to the latest versionUpdate hpuxws22APCH32.MOD_JK to the latest versionUpdate hpuxws22APCH32.MOD_PERL to the latest versionUpdate hpuxws22APCH32.WEBPROXY2 to the latest versionUpdate hpuxws22APACHE.WEBPROXY2 to the latest versionUpdate hpuxws22APACHE.PHP to the latest version | Aug 11, 2017 | Mar 30, 2015 |
| Oracle_linux | — | Upgrade php54-php-commonUpgrade php54-php-pgsqlUpgrade php55-php-cliUpgrade php55-runtimeUpgrade php54-php-bcmathUpgrade php55-php-pgsqlUpgrade php54-php-imapUpgrade php55-php-snmpUpgrade php54-php-snmpUpgrade php54-php-pdoUpgrade php55-php-xmlrpcUpgrade php55-php-ldapUpgrade php54-php-xmlUpgrade php54-php-pecl-zendopcacheUpgrade php55-php-dbaUpgrade php54-php-gdUpgrade php54-php-pspellUpgrade php55-php-opcacheUpgrade php54-php-processUpgrade php55-php-gmpUpgrade php55-php-mysqlndUpgrade php55-phpUpgrade php55-php-imapUpgrade php54-runtimeUpgrade php55-php-mbstringUpgrade php54-php-cliUpgrade php54-php-mysqlndUpgrade php55-php-pspellUpgrade php55-php-develUpgrade php54-php-recodeUpgrade php55-php-gdUpgrade php55-php-fpmUpgrade php55-php-processUpgrade php54-php-develUpgrade php55-scldevelUpgrade php54-php-fpmUpgrade php55-php-odbcUpgrade php55-php-soapUpgrade php54-scldevelUpgrade php55-php-intlUpgrade php55-php-pdoUpgrade php55-php-recodeUpgrade php55-php-xmlUpgrade php55-php-enchantUpgrade php55-php-tidyUpgrade php55-php-commonUpgrade php54-php-odbcUpgrade php54-php-dbaUpgrade php54-php-mbstringUpgrade php54-php-soapUpgrade php54-php-xmlrpcUpgrade php54-php-intlUpgrade php55-php-bcmathUpgrade php54-php-tidyUpgrade php54-php-enchantUpgrade php54-php-ldapUpgrade php54-phpUpgrade php54Upgrade php55 | Oct 16, 2024 | Mar 30, 2015 |
| Php | — | Upgrade to PHP version 5.6.7Upgrade to PHP version 5.4.39Upgrade to PHP version 5.5.23 | Sep 23, 2022 | Mar 30, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 4, 2015 |
| Suse | — | Upgrade apache2-mod_php5Upgrade php5-fpmUpgrade libmysql55client18Upgrade php5-wddxUpgrade php53-xmlrpcUpgrade php7-ctypeUpgrade php7-fileinfoUpgrade php53-sqliteUpgrade php5-pcntlUpgrade php53-domUpgrade php53-sysvsemUpgrade php53-gmpUpgrade php7-pearUpgrade apache2-mod_php53Upgrade php5-pgsqlUpgrade php5-zlibUpgrade php5-bcmathUpgrade php5-ctypeUpgrade libmysql55client_r18-x86Upgrade php7-zlibUpgrade libmysql55client_r18Upgrade php53-tokenizerUpgrade php53-mysqlUpgrade php5-intlUpgrade php53-pgsqlUpgrade php53-sysvmsgUpgrade php7-sysvsemUpgrade libclamav7Upgrade php5-dbaUpgrade libmysqlclient_r15-x86Upgrade php7-enchantUpgrade apache2-mod_php7Upgrade php72-develUpgrade php5-develUpgrade php5-gdUpgrade php7-bcmathUpgrade php5-pspellUpgrade php7-sysvmsgUpgrade php7-xmlwriterUpgrade php53-ldapUpgrade php7-pharUpgrade php53-bz2Upgrade libmysql55client18-32bitUpgrade php53-develUpgrade clamavUpgrade php7-tokenizerUpgrade php7-calendarUpgrade php5-zipUpgrade php53-bcmathUpgrade php53-soapUpgrade php53-fastcgiUpgrade php53-wddxUpgrade php5-gettextUpgrade php7-opensslUpgrade php5-enchantUpgrade libmysql55client18-x86Upgrade libmysqlclient_r15Upgrade php5-tokenizerUpgrade php53-mcryptUpgrade php7-ftpUpgrade php7-snmpUpgrade php53-exifUpgrade php53-jsonUpgrade php53-xslUpgrade php53-intlUpgrade php7-wddxUpgrade php5-sysvshmUpgrade libmysql55client_r18-32bitUpgrade php5-xmlrpcUpgrade php7-intlUpgrade php53-ftpUpgrade php5-xslUpgrade php5-fileinfoUpgrade php5-suhosinUpgrade php53-opensslUpgrade php7-fastcgiUpgrade php5-ldapUpgrade php7-pcntlUpgrade php7-curlUpgrade php7-iconvUpgrade php7-pgsqlUpgrade php5-ftpUpgrade mysqlUpgrade php53-sysvshmUpgrade php5-curlUpgrade php5-mbstringUpgrade php7-fpmUpgrade php53-pdoUpgrade php7-zipUpgrade php5-shmopUpgrade php53-gdUpgrade php5-exifUpgrade php7-sqliteUpgrade php5-jsonUpgrade php7-imapUpgrade php53-ctypeUpgrade php7-mcryptUpgrade php5-gmpUpgrade php5-domUpgrade php7-soapUpgrade php7-develUpgrade php5-opensslUpgrade php53-snmpUpgrade php7-gettextUpgrade php7-tidyUpgrade php53-iconvUpgrade php53-posixUpgrade php53-gettextUpgrade libmysqlclient15Upgrade php53-fileinfoUpgrade php7-shmopUpgrade php5-calendarUpgrade php7-xslUpgrade php7-pear-archive_tarUpgrade php7-gdUpgrade php5-xmlwriterUpgrade php53Upgrade php53-pspellUpgrade php7-xmlrpcUpgrade php7-jsonUpgrade php5Upgrade php5-iconvUpgrade php53-zlibUpgrade libmysqlclient15-32bitUpgrade php53-socketsUpgrade php7-xmlreaderUpgrade php7-exifUpgrade libclamav9Upgrade php7-sysvshmUpgrade php53-suhosinUpgrade php5-sysvmsgUpgrade php5-fastcgiUpgrade php53-dbaUpgrade libclammspack0Upgrade php7-socketsUpgrade mysql-toolsUpgrade php7-gmpUpgrade php5-mcryptUpgrade php5-xmlreaderUpgrade php7-embedUpgrade php53-odbcUpgrade php7-opcacheUpgrade php7-pspellUpgrade php5-pearUpgrade libmysqlclient15-x86Upgrade libfreshclam2Upgrade php5-sqliteUpgrade libmysqlclient_r15-32bitUpgrade php7-odbcUpgrade php5-mysqlUpgrade php53-zipUpgrade php5-sysvsemUpgrade php5-soapUpgrade php53-tidyUpgrade php7-mysqlUpgrade php7Upgrade php5-odbcUpgrade php53-curlUpgrade php7-bz2Upgrade php7-domUpgrade php53-pcntlUpgrade php5-snmpUpgrade php7-ldapUpgrade php53-imapUpgrade php5-pdoUpgrade php53-mbstringUpgrade php7-sodiumUpgrade php7-pdoUpgrade php53-xmlreaderUpgrade php7-readlineUpgrade php7-dbaUpgrade php53-shmopUpgrade php7-posixUpgrade php53-xmlwriterUpgrade php5-socketsUpgrade clamav-develUpgrade php7-mbstringUpgrade php53-calendarUpgrade php53-readlineUpgrade mysql-clientUpgrade php5-bz2Upgrade php53-pear | Dec 18, 2015 | Mar 30, 2015 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade clamavUpgrade php5-fpmUpgrade php5-cgiUpgrade php5-cli | Nov 8, 2024 | Mar 30, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub