CVE-2016-9954

The backtrack compilation code in the Irregex package (aka IrRegular Expressions) before 0.9.6 for Scheme allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression with a repeating pattern.

References

Affected packages

Git / github.com/ashinn/irregex

Affected ranges

Type

GIT

Repo

https://github.com/ashinn/irregex

Events

Introduced

Last affected

660a5fc00d579e077c72c417ef3ab63831003c08

Fixed

a16ffc86eca15fca9e40607d41de3cea9cf868f1

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.9.5"
        }
    ]
}

Affected versions

0.*

0.7.3

0.7.4

0.7.5

0.8.0

0.8.1

0.8.3

0.9.0

0.9.1

0.9.2

0.9.3

0.9.4

0.9.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9954.json"