brew-nvi-cve-2015-2305
Vulnerability from osv_homebrew
Published
2026-07-14 23:39
Modified
2026-07-27 14:59
Summary
Details
Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.
References
{
"affected": [
{
"ecosystem_specific": {
"fix": "patch",
"patches": [
{
"apply": [
"patches/03db4.patch",
"patches/19include_term_h.patch",
"patches/20glibc_has_grantpt.patch",
"patches/24fallback_to_dumb_term.patch",
"patches/26trailing_tab_segv.patch",
"patches/27support_C_locale.patch",
"patches/31regex_heap_overflow.patch"
],
"type": "backport",
"url": "https://deb.debian.org/debian/pool/main/n/nvi/nvi_1.81.6-17.debian.tar.xz"
}
]
},
"package": {
"ecosystem": "Homebrew",
"name": "nvi",
"purl": "pkg:brew/nvi"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.81.6_3"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"source": "generated"
},
"details": "Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.",
"id": "BREW-nvi-CVE-2015-2305",
"modified": "2026-07-27T14:59:08Z",
"published": "2026-07-14T23:39:39Z",
"references": [
{
"type": "ADVISORY",
"url": "http://blog.clamav.net/2015/04/clamav-0987-has-been-released.html"
},
{
"type": "ADVISORY",
"url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
},
{
"type": "ADVISORY",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
},
{
"type": "ADVISORY",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html"
},
{
"type": "ADVISORY",
"url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
},
{
"type": "ADVISORY",
"url": "http://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html"
},
{
"type": "ADVISORY",
"url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
},
{
"type": "ADVISORY",
"url": "http://openwall.com/lists/oss-security/2015/02/07/14"
},
{
"type": "ADVISORY",
"url": "http://openwall.com/lists/oss-security/2015/03/11/8"
},
{
"type": "ADVISORY",
"url": "http://php.net/ChangeLog-5.php"
},
{
"type": "ADVISORY",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
},
{
"type": "ADVISORY",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
},
{
"type": "ADVISORY",
"url": "http://www.debian.org/security/2015/dsa-3195"
},
{
"type": "ADVISORY",
"url": "http://www.kb.cert.org/vuls/id/695940"
},
{
"type": "ADVISORY",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"type": "ADVISORY",
"url": "http://www.securityfocus.com/bid/72611"
},
{
"type": "ADVISORY",
"url": "http://www.securitytracker.com/id/1031947"
},
{
"type": "ADVISORY",
"url": "http://www.ubuntu.com/usn/USN-2572-1"
},
{
"type": "ADVISORY",
"url": "http://www.ubuntu.com/usn/USN-2594-1"
},
{
"type": "ADVISORY",
"url": "https://guidovranken.wordpress.com/2015/02/04/full-disclosure-heap-overflow-in-h-spencers-regex-library-on-32-bit-systems/"
},
{
"type": "ADVISORY",
"url": "https://support.apple.com/HT205267"
},
{
"type": "ARTICLE",
"url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
},
{
"type": "ARTICLE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
},
{
"type": "ARTICLE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html"
},
{
"type": "ARTICLE",
"url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
},
{
"type": "ARTICLE",
"url": "http://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html"
},
{
"type": "ARTICLE",
"url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
},
{
"type": "ARTICLE",
"url": "http://openwall.com/lists/oss-security/2015/02/07/14"
},
{
"type": "ARTICLE",
"url": "http://openwall.com/lists/oss-security/2015/03/11/8"
},
{
"type": "EVIDENCE",
"url": "https://guidovranken.wordpress.com/2015/02/04/full-disclosure-heap-overflow-in-h-spencers-regex-library-on-32-bit-systems/"
},
{
"type": "WEB",
"url": "http://www.kb.cert.org/vuls/id/695940"
}
],
"schema_version": "1.7.3",
"upstream": [
"CVE-2015-2305"
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…