Skip to content
OpenAdvisories
High USN-5610-1 1 CVE

rust-regex vulnerability

Published Sep 14, 2022 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Addison Crump discovered that rust-regex did not properly limit
the complexity of the regular expressions (regex) it parses.
An attacker could possibly use this issue to cause a denial of
service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS rust-regex 1.2.1-3ubuntu0.1
Ubuntu · 22.04 LTS 22.04:LTS rust-regex 1.5.4-1ubuntu0.1

Vulnerabilities 1

  • High 7.5
    CVE-2022-24713 Public exploit EPSS 14%

    Regular expression denial of service in Rust's regex crate

    regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those (tunable) mitigations…

    rust-lang regex thunderbird firefox Debian Ubuntu Azure Linux Alpine crates.io

References

  • report
    https://ubuntu.com/security/CVE-2022-24713