Open mend-for-github-com[bot] opened 1 year ago
:heavy_check_mark: This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.
:information_source: This issue was automatically re-opened by Mend because the vulnerable library in the specific branch(es) has been detected in the Mend inventory.
Gnu Distributions
Library home page: https://ftp.gnu.org/gnu/grep?wsslib=grep
Found in HEAD commit: 802457f036ab4eb3ba012bdede243dbbc52f72ec
Vulnerabilities
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Details
CVE-2015-1345
### Vulnerable Library - grepgrep-2.21Gnu Distributions
Library home page: https://ftp.gnu.org/gnu/grep?wsslib=grep
Found in HEAD commit: 802457f036ab4eb3ba012bdede243dbbc52f72ec
Found in base branch: main
### Vulnerable Source Files (1)The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.
Publish Date: 2015-02-12
URL: CVE-2015-1345
### Threat AssessmentExploit Maturity: Not Defined
EPSS: 0.0%
### CVSS 4 Score Details (5.1)Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: N/A - Impact Metrics: - Confidentiality Impact: N/A - Integrity Impact: N/A - Availability Impact: N/A
For more information on CVSS4 Scores, click here. ### Suggested FixType: Upgrade version
Origin: https://nvd.nist.gov/vuln/detail/CVE-2015-1345
Release Date: 2015-02-12
Fix Resolution: 2.22