CVE-2022-23901: Critical severity re2c re2c vulnerability
A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/deadrules.cc.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/re2cto a version that resolves this vulnerability.Fixed in 3.0-2Fixed in 4.1-1Fixed in 4.6-1 - Upgrade
Upgrade
debian/re2cto a version that resolves this vulnerability.Fixed in 3.0-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-23901?
CVE-2022-23901 is considered a high-severity vulnerability due to its potential to cause a stack overflow.
How do I fix CVE-2022-23901?
To mitigate CVE-2022-23901, upgrade to the latest version of re2c that resolves the infinite recursion vulnerability.
Which versions of re2c are affected by CVE-2022-23901?
CVE-2022-23901 specifically affects re2c version 2.2.
What kind of vulnerability is CVE-2022-23901?
CVE-2022-23901 is classified as a stack overflow vulnerability stemming from infinite recursion in the code.
Where can I find more information about CVE-2022-23901?
Information about CVE-2022-23901 can be found in the issue tracker on the re2c GitHub repository.