CVE-2010-0634
published 2010-02-12CVE-2010-0634: Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2.5.35 has unknown impact and attack vectors.
PriorityP422high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.04%
63.7th percentile
Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2.5.35 has unknown impact and attack vectors.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | flex | >= 0 < 2.5.35-1 | 2.5.35-1 |
| adobe | flex | >= 0 < 2.5.35-1 | 2.5.35-1 |
| adobe | flex | >= 0 < 2.5.35-1 | 2.5.35-1 |
| adobe | flex | >= 0 < 2.5.35-1 | 2.5.35-1 |
| debian | flex | < flex 2.5.35-1 (bookworm) | flex 2.5.35-1 (bookworm) |
| will_estes | flex | <= 2.5.34 | — |
| will_estes | flex | — | — |
| will_estes | flex | — | — |
| will_estes | flex | — | — |
| will_estes | flex | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
avahi: daemon infinite loop triggered by an empty UDP packet (CVE-2010-2244 fix regression)
vendor_redhat·2011-01-04·CVSS 4.3
CVE-2011-0634 [MEDIUM] CWE-835 avahi: daemon infinite loop triggered by an empty UDP packet (CVE-2010-2244 fix regression)
avahi: daemon infinite loop triggered by an empty UDP packet (CVE-2010-2244 fix regression)
No description is available for this CVE.
Package: avahi (Red Hat Enterprise Linux 5) - Affected
Package: avahi (Red Hat Enterprise Linux 6) - Affected
Red Hat
flex: Security fixes in v2.5.35
vendor_redhat·2010-01-29·CVSS 7.5
CVE-2010-0634 [HIGH] flex: Security fixes in v2.5.35
flex: Security fixes in v2.5.35
Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2.5.35 has unknown impact and attack vectors.
Debian
CVE-2010-0634: flex - Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2.5.3...
vendor_debian·2010·CVSS 7.5
CVE-2010-0634 [HIGH] CVE-2010-0634: flex - Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2.5.3...
Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2.5.35 has unknown impact and attack vectors.
Scope: local
bookworm: resolved (fixed in 2.5.35-1)
bullseye: resolved (fixed in 2.5.35-1)
forky: resolved (fixed in 2.5.35-1)
sid: resolved (fixed in 2.5.35-1)
trixie: resolved (fixed in 2.5.35-1)
GHSA
GHSA-6qjv-pcp7-rgfm: Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2
ghsa_unreviewed·2022-05-02
CVE-2010-0634 [HIGH] GHSA-6qjv-pcp7-rgfm: Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2
Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2.5.35 has unknown impact and attack vectors.
OSV
CVE-2010-0634: Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2
osv·2010-02-12·CVSS 7.5
CVE-2010-0634 [HIGH] CVE-2010-0634: Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2
Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2.5.35 has unknown impact and attack vectors.
No detection rules found.
No public exploits indexed.
2010-02-12
Published