Wind River Support Network

HomeDefectsLIN6-9499
Fixed

LIN6-9499 : Security Advisory - mysql & php - CVE-2015-2305

Created: Feb 26, 2015    Updated: Dec 3, 2018
Resolved Date: Feb 27, 2015
Previous ID: LIN4-32323
Found In Version: 6.0.0.17
Fix Version: 6.0.0.18
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace

Description

A public disclosure of a heap overflow in a regex C library originally written by Henry Spencer, which appears to be embedded in the code base of several projects. 

https://guidovranken.wordpress.com/2015/02/04/full-disclosure-heap-overflow-in-h-spencers-regex-library-on-32-bit-systems/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2305

Other Downloads


Live chat
Online