Vulnerabilities

TI-2022-07883 CVE-2022-23901 · GHSA-37h7-52mc-gc3m

A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.

MEDIUM 45

A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01588 Published 2022-03-29 No fix listed CWE-787

TI-2018-15194 CVE-2018-21232 · GHSA-pgr8-gpgg-9j5m

LOW 28

re2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01468 Published 2020-04-29 No fix listed CWE-674

TI-2020-09620 CVE-2020-11958 · GHSA-qvw2-729q-g92x

LOW 37

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01698 Published 2020-04-21 No fix listed CWE-787