AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2015-2305

MEDIUM · CVSS 6.8 EPSS 8.34%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-03-30 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.8. See the original NVD description below for full technical details.

CVE
CVE-2015-2305
Severity
MEDIUM
CVSS
6.8
EPSS
8.34%

Original NVD Description

Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.