CVE-2006-0459

Publication date 29 March 2006

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33 does not allocate enough memory for grammars containing (1) REJECT statements or (2) trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependent attackers to execute arbitrary code.

Status

Package Ubuntu Release Status
flex 7.04 feisty
Fixed 2.5.31-38ubuntu1
6.10 edgy
Fixed 2.5.31-38ubuntu1
6.06 LTS dapper
Fixed 2.5.31-38ubuntu1
cyrus21-imapd 7.04 feisty
Fixed 2.1.18-2ubuntu2
6.10 edgy
Fixed 2.1.18-2ubuntu2
6.06 LTS dapper
Fixed 2.1.18-2ubuntu2
flex-old 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected
gcc-3.3 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected
gcc-3.4 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected
gob2 7.04 feisty
Fixed 2.0.14-1ubuntu1
6.10 edgy
Fixed 2.0.14-1ubuntu1
6.06 LTS dapper
Fixed 2.0.14-1ubuntu1
xine-extracodecs 7.04 feisty
Fixed 1.1.1+ubuntu1-2
6.10 edgy
Fixed 1.1.1+ubuntu1-2
6.06 LTS dapper
Fixed 1.1.1+ubuntu1-2
xine-lib 7.04 feisty Ignored end of life, was needed
6.10 edgy
Fixed 1.1.2+repacked1-0ubuntu3.4
6.06 LTS dapper
Fixed 1.1.1+ubuntu2-7.7

References

Related Ubuntu Security Notices (USN)

Other references