CVE-2015-2305

21

FAUCET Score

CVE-2015-2305 describes an integer overflow vulnerability in the Henry Spencer BSD regex library (rxspencer) on 32-bit platforms, affecting products like NetBSD, Canonical, Debian, and PHP. This flaw, rated with a CVSS score of 6.8, could allow remote attackers to execute arbitrary code via a large regular expression that triggers a heap-based buffer overflow. Despite its high FAUCET Risk Score of 91/100, there is no evidence of active exploitation, nor are there any publicly available exploits in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		3.8.g5CPE matchmatch criteria	cpe:2.3:a:rxspencer_project:rxspencer:3.8.g5:::::::*
		10.04CPE matchmatch criteria	cpe:2.3:o:canonical:ubuntu_linux:10.04::::-:::
		12.04CPE matchmatch criteria	cpe:2.3:o:canonical:ubuntu_linux:12.04::::-:::
		14.04CPE matchmatch criteria	cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm:::
		14.10CPE matchmatch criteria	cpe:2.3:o:canonical:ubuntu_linux:14.10:::::::*

CVSS Data

CVSS version used by this source: 2.0

6.8MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Exploitability Score

8.6

Impact Score

6.4

CvssVersion

2.0

Exploit Intelligence

EPSS Score

8.37%

Probability of exploitation in next 30 days

EPSS Percentile

94.4%

Percentile rank of EPSS score among Peer Group

As of 2026-07-26

Model: v2026.06.15

This CVE's current EPSS score of 0.0837 is in the 94th percentile among its peer group of 19,955 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (34)

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: php54-php-pecl-zendopcache-0:7.0.4-3.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: php55-0:2.0-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: php55-php-0:5.5.21-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: php54-0:2.0-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: php54-php-0:5.4.40-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: php54-php-pecl-zendopcache-0:7.0.4-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: php55-0:2.0-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: php55-php-0:5.5.21-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: php54-0:2.0-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: php54-php-0:5.4.40-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: php54-php-pecl-zendopcache-0:7.0.4-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: php55-0:2.0-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: php55-php-0:5.5.21-2.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: php54-0:2.0-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: php54-php-0:5.4.40-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: php55-0:2.0-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: php55-php-0:5.5.21-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: php54-0:2.0-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: php54-php-0:5.4.40-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: php54-php-pecl-zendopcache-0:7.0.4-3.el6

redhatno patchvia redhat_api

Product: Red Hat Software CollectionsFixed in: php54-php

redhatno patchvia redhat_api

Product: Red Hat Software CollectionsFixed in: php55-php

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: php

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: php53

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: mysql

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: php

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: mariadb

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: php

redhatend of lifevia redhat_api

Product: Red Hat Software CollectionsFixed in: mariadb55-mariadb

redhatend of lifevia redhat_api

Product: Red Hat Software CollectionsFixed in: mysql55-mysql

redhatend of lifevia redhat_api

Product: Red Hat Software CollectionsFixed in: rh-mariadb100-mariadb

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: mysql51-mysql

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: mysql

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: mysql55-mysql

Vendor Advisories (1)

redhatCVE-2015-2305Moderate

regex: heap overflow in regcomp() on 32-bit architectures

References

blog.clamav.net / 2015/04/clamav-0987-has-been-released.html

Third Party Advisory

lists.apple.com / archives/security-announce/2015/Sep/msg00008.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2015-05/msg00005.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2015-05/msg00026.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-updates/2015-04/msg00002.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-updates/2015-05/msg00024.html

Mailing ListThird Party Advisory

Mailing ListThird Party Advisory

openwall.com / lists/oss-security/2015/02/07/14

Mailing ListThird Party Advisory

openwall.com / lists/oss-security/2015/03/11/8

Mailing ListThird Party Advisory

php.net / ChangeLog-5.php

Vendor Advisory

rhn.redhat.com / errata/RHSA-2015-1053.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2015-1066.html

Third Party Advisory

guidovranken.wordpress.com / 2015/02/04/full-disclosure-heap-overflow-in-h-spencers-regex-library-on-32-bit-systems

ExploitThird Party Advisory

support.apple.com / HT205267

Third Party Advisory

debian.org / security/2015/dsa-3195

Third Party Advisory

kb.cert.org / vuls/id/695940

Third Party AdvisoryUS Government Resource

oracle.com / technetwork/topics/security/linuxbulletinjan2016-2867209.html

Third Party Advisory

securityfocus.com / bid/72611

Third Party AdvisoryVDB Entry

securitytracker.com / id/1031947

Third Party AdvisoryVDB Entry

ubuntu.com / usn/USN-2572-1

Third Party Advisory

ubuntu.com / usn/USN-2594-1

Third Party Advisory