CVE-2008-0171: Input Validation
regex/v4/perlmatchernonrecursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0171?
CVE-2008-0171 has been classified as a denial of service vulnerability that can lead to application crashes.
How do I fix CVE-2008-0171?
To fix CVE-2008-0171, upgrade Boost to a version later than 1.34 that addresses this vulnerability.
What versions of Boost are affected by CVE-2008-0171?
Boost versions 1.33 and 1.34 are affected by CVE-2008-0171, allowing for potential denial of service.
What kind of attack does CVE-2008-0171 enable?
CVE-2008-0171 enables context-dependent attacks that can exploit invalid regular expressions to cause application crashes.
Is there a workaround for CVE-2008-0171?
There is no official workaround for CVE-2008-0171, and upgrading to a patched version is the recommended action.