The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade flex | Aug 30, 2017 | Sep 21, 2016 |
| Debian | — | Upgrade flex | Apr 3, 2017 | Aug 25, 2016 |
| Gentoo Linux | — | Upgrade sys-devel/flex.Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Oct 30, 2017 | Sep 21, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade flex | Dec 4, 2019 | Sep 21, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade flex | Sep 25, 2019 | Sep 21, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade flex | Sep 24, 2019 | Sep 21, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 18, 2016 |
| Suse | — | Upgrade libwiretap6Upgrade openslpUpgrade libbonobo-docUpgrade libwireshark9Upgrade perl-Cyrus-SIEVE-managesieveUpgrade libwsutil7Upgrade MozillaThunderbird-buildsymbolsUpgrade openslp-develUpgrade mozilla-nsprUpgrade libnetpbm11-32bitUpgrade mozilla-nssUpgrade libQtWebKit4Upgrade MozillaThunderbird-develUpgrade MozillaFirefox-translationsUpgrade flexUpgrade libnetpbm-develUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3Upgrade mozilla-nss-develUpgrade wiresharkUpgrade atUpgrade libbonobo-develUpgrade mozilla-nss-toolsUpgrade wireshark-develUpgrade libksuseinstall1-32bitUpgrade libfreebl3-32bitUpgrade libnetpbm11Upgrade MozillaFirefox-translations-otherUpgrade libQtWebKit4-32bitUpgrade wireshark-gtkUpgrade mozilla-nss-32bitUpgrade libwscodecs1Upgrade libkde4-32bitUpgrade libbonoboUpgrade mozilla-nspr-develUpgrade libwiretap7Upgrade libwsutil8Upgrade MozillaFirefoxUpgrade libkdecore4-32bitUpgrade libkde4Upgrade libbonobo-langUpgrade perl-Cyrus-IMAPUpgrade flex-32bitUpgrade libbonobo-32bitUpgrade libwireshark8Upgrade sgmltoolUpgrade netpbmUpgrade libQtWebKit-develUpgrade libkdecore4Upgrade firefox-fontconfigUpgrade openslp-32bitUpgrade mdbtoolsUpgrade MozillaThunderbird-translations-commonUpgrade libksuseinstall1Upgrade MozillaThunderbirdUpgrade MozillaFirefox-develUpgrade openslp-serverUpgrade MozillaThunderbird-translations-otherUpgrade bogofilterUpgrade MozillaFirefox-translations-common | Sep 21, 2016 | Sep 21, 2016 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 21, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub