Heap-based buffer overflow in Flex - CVE-2017-5469,CVE-2016-6354
Published: April 19, 2017
Vulnerability identifier: #VU6351
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-5469,CVE-2016-6354
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to boundary error in yy_get_next_buffer() function in Flex before 2.6.1. A remote attacker can trigger heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
Affected software
Flex
Arch Linux
Gentoo Linux
Debian Linux
Red Hat Enterprise Linux for x86_64
SUSE Linux
Ubuntu
Fedora
flex (Alpine package)
flex
Firefox ESR
Mozilla Firefox
Arch Linux
Gentoo Linux
Debian Linux
Red Hat Enterprise Linux for x86_64
SUSE Linux
Ubuntu
Fedora
flex (Alpine package)
flex
Firefox ESR
Mozilla Firefox
How to mitigate CVE-2017-5469,CVE-2016-6354
Update to version 2.1.6.
flex (Alpine package) - update to 2.5.39-r1
flex - addressed in versions 2.6.0-2.fc23, 2.6.0-2.fc24
flex - addressed in versions 2.6.0-2.fc23, 2.6.0-2.fc24
External References
Related Security Bulletins
- Multiple vulnerabilities in Mozilla Firefox
- Remote code execution in Flex
- Multiple vulnerabilities in Mozilla Thunderbird
- Red Hat update for Mozilla Thunderbird
- SUSE Linux update for MozillaFirefox
- Debian update for flex
- Gentoo update for flex
- Arch Linux update for firefox
- Ubuntu update for Firefox
- Ubuntu update for Firefox
- Gentoo update for Mozilla Firefox
- OpenSUSE Linux update for seamonkey
- SUSE Linux update for MozillaFirefox
- Heap-based buffer overflow in flex (Alpine package)
- Fedora 23 update for flex
- Fedora 24 update for flex