Re2c

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Re2c records in CISA KEV

No Re2c vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2022-07883 CVE-2022-23901 · GHSA-37h7-52mc-gc3m

MEDIUM 45

A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01588 Published 2022-03-29 No fix listed CWE-787

TI-2020-09620 CVE-2020-11958 · GHSA-qvw2-729q-g92x

LOW 37

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01698 Published 2020-04-21 No fix listed CWE-787

TI-2018-15194 CVE-2018-21232 · GHSA-pgr8-gpgg-9j5m

LOW 28

re2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01468 Published 2020-04-29 No fix listed CWE-674