Every CVE Search/ Get API key

CVE-2008-0171

regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1...

5.0 MediumFix available

regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression.

Exploit likelihood

2.69%Unchanged since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression.

Record
CVE-2008-0171
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression.

Record
CVE-2008-0171
Updated
2026-11-02
EUVDEUVD-2008-0183 No score

regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression.

Record
EUVD-2008-0183
Updated
2026-11-03
GitHub AdvisoriesGHSA-mc8j-3vrc-57vf No score

regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1...

regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression.

Record
GHSA-mc8j-3vrc-57vf
Weakness
CWE-20
Updated
2026-11-02
OSVSUSE-RU-2021:1414-1 No score

Recommended update for boost-legacy

This update for boost-legacy fixes the following issues:

Create a new boost-legacy package with version 1.66.0. (bsc#1175886, jsc#SLE-17304, jsc#ECO-3147)

  • Remove duplicate license package that we get from original Boost
  • Add a backport of Boost.Optional::has_value() for LibreOffice
  • Use %license instead of %doc (bsc#1082318)
  • Multibuild requires versioned Name: tag . (bsc#1076640)

Changes in version 1.66.0:

  • Beast: new portable HTTP, WebSocket and network operations using Boost.Asio. Header-only library.
  • Callable Traits: new library and successor to Boost.FunctionTypes. Header-only library.
  • Mp11: new metaprogramming library
  • Asio:
    • implemented interface changes to reflect the Networking TS (N4656)
    • functions and classes that have been superseded by Networking TS functionality have been deprecated.
    • added support for customized handler tracking
    • removed previously deprecated functions
  • Atomic: improved compatibility with GCC 7. 128-bit operations on x86_64 no longer require linking with compiled library.
  • DateTime: Fixed an integral overflow that could cause incorrect results when adding or subtracting many years from a date.
  • Format: New format specifiers added and volatile arguments can not be safely used with operator%
  • Fusion:
    • fix compile error with std::array
    • remove circular preprocessor include
  • PolyCollection: backported to GCC 4.8 and 4.9 with some limitations
  • Uuid: added RTF-4122 namespaces in boost::uuids::ns
Record
SUSE-RU-2021:1414-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
boost
Red Hat:enterprise_linux:5::client_workstation
before 0:1.33.1-15.el5
0:1.33.1-15.el5
boost-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 0:1.33.1-15.el5
0:1.33.1-15.el5
boost-devel
Red Hat:enterprise_linux:5::client_workstation
before 0:1.33.1-15.el5
0:1.33.1-15.el5
boost
Red Hat:enterprise_linux:5::client
before 0:1.33.1-15.el5
0:1.33.1-15.el5
boost-debuginfo
Red Hat:enterprise_linux:5::client
before 0:1.33.1-15.el5
0:1.33.1-15.el5
boost-doc
Red Hat:enterprise_linux:5::client
before 0:1.33.1-15.el5
0:1.33.1-15.el5
boost
Red Hat:enterprise_linux:5::server
before 0:1.33.1-15.el5
0:1.33.1-15.el5
boost-debuginfo
Red Hat:enterprise_linux:5::server
before 0:1.33.1-15.el5
0:1.33.1-15.el5
boost-devel
Red Hat:enterprise_linux:5::server
before 0:1.33.1-15.el5
0:1.33.1-15.el5
boost-doc
Red Hat:enterprise_linux:5::server
before 0:1.33.1-15.el5
0:1.33.1-15.el5
boost-legacy-base
SUSE:Linux Enterprise Module for Legacy 15 SP2
before 1.66.0-1.4.1
1.66.0-1.4.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-0171 is a medium vulnerability (CVSS 5.0) in Boost, published January 17, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.69%, the 85th percentile. Fixed in boost 0:1.33.1-15.el5.

References

Show 54 moreShow less
MoveEnter Open