LWN.net Logo

boost: denial of service

Package(s):boost CVE #(s):CVE-2008-0171 CVE-2008-0172
Created:January 17, 2008 Updated:March 22, 2012
Description: From the Ubuntu alert: Will Drewry and Tavis Ormandy discovered that the boost library did not properly perform input validation on regular expressions. An attacker could send a specially crafted regular expression to an application linked against boost and cause a denial of service via application crash.
Alerts:
Gentoo 200802-08 2008-02-14
SuSE SUSE-SR:2008:006 2008-03-14
Fedora FEDORA-2008-0754 2008-03-13
rPath rPSA-2008-0063-1 2008-02-13
Mandriva MDVSA-2008:032 2007-02-01
Fedora FEDORA-2008-0880 2008-01-22
Ubuntu USN-570-1 2008-01-16
Red Hat RHSA-2012:0305-03 2012-02-21
Oracle ELSA-2012-0305 2012-03-07
Scientific Linux SL-boos-20120321 2012-03-21

(Log in to post comments)

Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds