Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2015-1345

Description

The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.

POC

Reference

- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Github

- https://github.com/1karu32s/dagda_offline

- https://github.com/MrE-Fog/dagda

- https://github.com/bharatsunny/dagda

- https://github.com/dbeltran24/Dagda

- https://github.com/eliasgranderubio/dagda

- https://github.com/man151098/dagda