One Article Review
| Source |  CVE Liste |
|---|---|
| Identifiant | 5424288 |
| Date de publication | 2022-06-27 23:15:08 (vue: 2022-06-28 01:06:20) |
| Titre | CVE-2022-31099 |
| Texte | rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, the stack may overflow, possibly enabling a Denial of Service attack. This happens when parsing an expression with several hundred levels of nesting, causing the process to abort immediately. This is a security concern for you, if your service parses untrusted rulex expressions (expressions provided by an untrusted user), and your service becomes unavailable when the process running rulex aborts due to a stack overflow. The crash is fixed in version **0.4.3**. Affected users are advised to update to this version. There are no known workarounds for this issue. |
| Envoyé | Oui |
| Condensat | **0 2022 3** 31099 abort aborts advised affected are attack becomes causing concern crash cve denial due enabling expression expressions fixed happens hundred immediately issue known language levels may nesting new overflow parses parsing portable possibly process provided regular rulex running security service several stack unavailable untrusted update user users version when workarounds your |
| Tags | |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.