CVE-2015-1345

The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a...

2.1 LowFix available

CVE-2015-1345 is a low vulnerability (CVSS 2.1) in Gnu Grep, published February 12, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 41st percentile. Fixed in grep 2.20-4.1.

The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.

Exploit likelihood

0.49%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.

Record: CVE-2015-1345
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.

Record: CVE-2015-1345
Updated: 2026-11-02

EUVDEUVD-2015-1484 No score

The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.

Record: EUVD-2015-1484
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5wcr-xg97-jwqq No score

The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a...

The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.

Record: GHSA-5wcr-xg97-jwqq
Weakness: CWE-119
Updated: 2026-11-02

OSV No score

The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.

Record: CVE-2015-1345
Updated: 2026-11-02

OSVDEBIAN-CVE-2015-1345 No score

The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.

Record: DEBIAN-CVE-2015-1345
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10248-1 No score

grep-2.27-2.1 on GA media

These are all security issues fixed in the grep-2.27-2.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10248-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2015-1345 No score

The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.

Record: UBUNTU-CVE-2015-1345
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`grep` Debian:12	before 2.20-4.1	2.20-4.1
`grep` Debian:13	before 2.20-4.1	2.20-4.1
`grep` Debian:14	before 2.20-4.1	2.20-4.1
`grep` Red Hat:enterprise_linux:6::client	before 0:2.20-3.el6	0:2.20-3.el6
`grep-debuginfo` Red Hat:enterprise_linux:6::client	before 0:2.20-3.el6	0:2.20-3.el6
`grep` Red Hat:enterprise_linux:6::computenode	before 0:2.20-3.el6	0:2.20-3.el6
`grep-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:2.20-3.el6	0:2.20-3.el6
`grep` Red Hat:enterprise_linux:6::server	before 0:2.20-3.el6	0:2.20-3.el6
`grep-debuginfo` Red Hat:enterprise_linux:6::server	before 0:2.20-3.el6	0:2.20-3.el6
`grep` Red Hat:enterprise_linux:6::workstation	before 0:2.20-3.el6	0:2.20-3.el6

Show 10 moreShow less

Affected packages
Package	Affected	Fixed
`grep-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:2.20-3.el6	0:2.20-3.el6
`grep` Red Hat:enterprise_linux:7::client	before 0:2.20-2.el7	0:2.20-2.el7
`grep-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.20-2.el7	0:2.20-2.el7
`grep` Red Hat:enterprise_linux:7::computenode	before 0:2.20-2.el7	0:2.20-2.el7
`grep-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.20-2.el7	0:2.20-2.el7
`grep` Red Hat:enterprise_linux:7::server	before 0:2.20-2.el7	0:2.20-2.el7
`grep-debuginfo` Red Hat:enterprise_linux:7::server	before 0:2.20-2.el7	0:2.20-2.el7
`grep` Red Hat:enterprise_linux:7::workstation	before 0:2.20-2.el7	0:2.20-2.el7
`grep-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:2.20-2.el7	0:2.20-2.el7
`grep` openSUSE:Tumbleweed	before 2.27-2.1	2.27-2.1

History

History
When	Changed	Sources
2026-11-03	affected
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 25 moreShow less