CVE-2022-33879

Incomplete fix and new regex DoS in StandardsExtractingContentHandler

published June 27, 2022

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found a separate, new regex DoS in a different regex in the StandardsExtractingContentHandler. These are now fixed in 1.28.4 and 2.4.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01984 · 80.4th percentile
Published
2022-06-27T21:40Z
EPSS history
Timeline
  • 27 JUN 21:40Z
    Incomplete fix and new regex DoS in StandardsExtractingContentHandler
    cvelistv5