cve/2015/CVE-2015-1345.md

CVE-2015-1345

Description

The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Github

• https://github.com/MrE-Fog/dagda
• https://github.com/bharatsunny/dagda
• https://github.com/eliasgranderubio/dagda
• https://github.com/man151098/dagda