{"id":"CVE-2015-1345","aliases":["DEBIAN-CVE-2015-1345","EUVD-2015-1484","GHSA-5wcr-xg97-jwqq","RHSA-2015:1447","RHSA-2015:2111","UBUNTU-CVE-2015-1345","openSUSE-SU-2024:10248-1"],"status":"published","title":"The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a...","description":"The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00486,"percentile":0.42167,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2015-02-12T16:00:00Z","modified":"2026-09-09T06:47:19Z","fixes":[{"ecosystem":"Debian:12","package":"grep","fixed_in":["2.20-4.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"grep","fixed_in":["2.20-4.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"grep","fixed_in":["2.20-4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"grep","fixed_in":["0:2.20-2.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"grep-debuginfo","fixed_in":["0:2.20-2.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"grep","fixed_in":["0:2.20-2.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"grep-debuginfo","fixed_in":["0:2.20-2.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"grep","fixed_in":["0:2.20-2.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"grep-debuginfo","fixed_in":["0:2.20-2.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"grep","fixed_in":["0:2.20-2.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"grep-debuginfo","fixed_in":["0:2.20-2.el7"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"grep","fixed_in":["2.27-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"grep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20-4.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"grep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20-4.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"grep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20-4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"grep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"grep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"grep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"grep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"grep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"grep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"grep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"grep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"grep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-2.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"grep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-2.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"grep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-2.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"grep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-2.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"grep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-2.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"grep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-2.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"grep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-2.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"grep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-2.el7"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"grep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-2.1"}]}]}],"products":[{"vendor":"gnu","product":"grep"},{"vendor":"opensuse","product":"opensuse"}],"references":[{"url":"http://debbugs.gnu.org/cgi/bugreport.cgi?bug=19563","tags":["x_refsource_CONFIRM","x_transferred","Exploit","evidence"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1447.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-02/msg00037.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/72281","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2015/01/22/10","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://git.savannah.gnu.org/cgit/grep.git/commit/?id=83a95bd8c8561875b948cadd417c653dbe7ef2e2","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1345","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-5wcr-xg97-jwqq"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-1345","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1447","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=799863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=889935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=982215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1167766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1171806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1183651","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1447.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-5667","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5667","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5667","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1345","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1345","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2111","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103259","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1159012","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2111.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-1345","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1345","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-1345","description":"The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.","status":"published","published":"2015-02-12T16:00:00Z","modified":"2024-08-06T04:40:18.659Z","updated_at":"2026-11-02T14:35:44.046042Z"}],"euvd":[{"id":"EUVD-2015-1484","description":"The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.","status":"published","published":"2015-02-12T16:00:00Z","modified":"2024-08-06T04:40:18Z","updated_at":"2026-11-03T02:22:16.145787Z"}],"ghsa":[{"id":"GHSA-5wcr-xg97-jwqq","title":"The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a...","description":"The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.","status":"published","published":"2022-05-14T02:06:47Z","modified":"2023-02-02T05:05:26Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:52:06.598736Z"}],"nvd":[{"id":"CVE-2015-1345","description":"The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.","status":"published","published":"2015-02-12T16:59:03.707Z","modified":"2026-06-17T00:22:14.137Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:01.643178Z"}],"osv":[{"id":"CVE-2015-1345","description":"The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.","status":"published","published":"2015-02-12T16:59:03Z","modified":"2026-04-10T03:45:07.11768Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2015-1345","description":"The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.","status":"published","published":"2015-02-12T16:59:03.707Z","modified":"2026-09-09T06:47:19.569303507Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"openSUSE-SU-2024:10248-1","title":"grep-2.27-2.1 on GA media","description":"These are all security issues fixed in the grep-2.27-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:19:55.781136Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2015:1447","title":"Red Hat Security Advisory: grep security, bug fix, and enhancement update","status":"published","published":"2024-09-15T22:19:19Z","modified":"2026-06-28T10:14:18Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:2111","title":"Red Hat Security Advisory: grep security and bug fix update","status":"published","published":"2024-09-15T22:19:24Z","modified":"2026-06-27T10:03:26Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"UBUNTU-CVE-2015-1345","description":"The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.","status":"withdrawn","published":"2015-02-12T16:59:00Z","modified":"2025-07-16T07:32:39.530033Z","updated_at":"2026-11-02T15:54:09.721803Z"}]}}