VULNERABILITY INTELLIGENCE
CVE-2015-1345
CVSS score2.1 LOW
EPSS probability0.49%
CISA KEVNot currently listed
Published2015-02-12
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:P
Description
The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer