Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-8qc9-3mxe-8ydp
Vulnerability ID VCID-8qc9-3mxe-8ydp
Aliases CVE-2022-33879
GHSA-6q8v-2hvm-fx37
Summary The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found a separate, new regex DoS in a different regex in the StandardsExtractingContentHandler. These are now fixed in 1.28.4 and 2.4.1.
Status Published
Exploitability 0.5
Weighted Severity 3.0
Risk 1.5
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00027 https://api.first.org/data/v1/epss?cve=CVE-2022-33879
epss 0.00027 https://api.first.org/data/v1/epss?cve=CVE-2022-33879
cvssv3.1 5.9 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1_qr LOW https://github.com/advisories/GHSA-6q8v-2hvm-fx37
cvssv3.1 3.3 https://lists.apache.org/thread/wfno8mf5nlcvbs78z93q9thgrm30wwfh
generic_textual LOW https://lists.apache.org/thread/wfno8mf5nlcvbs78z93q9thgrm30wwfh
cvssv3.1 3.3 https://nvd.nist.gov/vuln/detail/CVE-2022-33879
generic_textual LOW https://nvd.nist.gov/vuln/detail/CVE-2022-33879
cvssv3.1 3.3 https://security.netapp.com/advisory/ntap-20220812-0004
generic_textual LOW https://security.netapp.com/advisory/ntap-20220812-0004
cvssv3.1 3.3 http://www.openwall.com/lists/oss-security/2022/06/27/5
generic_textual LOW http://www.openwall.com/lists/oss-security/2022/06/27/5
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2022-33879
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33879
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://lists.apache.org/thread/wfno8mf5nlcvbs78z93q9thgrm30wwfh
https://nvd.nist.gov/vuln/detail/CVE-2022-33879
https://security.netapp.com/advisory/ntap-20220812-0004
https://security.netapp.com/advisory/ntap-20220812-0004/
http://www.openwall.com/lists/oss-security/2022/06/27/5
1015002 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1015002
GHSA-6q8v-2hvm-fx37 https://github.com/advisories/GHSA-6q8v-2hvm-fx37
USN-7529-1 https://usn.ubuntu.com/7529-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Found at https://lists.apache.org/thread/wfno8mf5nlcvbs78z93q9thgrm30wwfh
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Found at https://nvd.nist.gov/vuln/detail/CVE-2022-33879
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Found at https://security.netapp.com/advisory/ntap-20220812-0004
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Found at http://www.openwall.com/lists/oss-security/2022/06/27/5
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.07949
EPSS Score 0.00027
Published At June 4, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T17:13:39.386846+00:00 Debian Importer Import https://security-tracker.debian.org/tracker/data/json 38.6.0