Red Hat Security AdvisoryRHSA-2015:1447
grep security, bug fix, and enhancement update
Released 2015-07-20 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) grep-2.20-3.el6
- Red Hat Enterprise Linux HPC Node (v. 6) grep-2.20-3.el6
- Red Hat Enterprise Linux Server (v. 6) grep-2.20-3.el6
- Red Hat Enterprise Linux Workstation (v. 6) grep-2.20-3.el6
Fixes 2 records
Priority LOW 22
Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long input line that triggers a heap-based buffer overflow.
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.01022 · Published 2013-01-03 · Fixed CWE-189
Priority LOW 12
The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00486 · Published 2015-02-12 · Fixed CWE-119
