CVE-2017-5357: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service (crash) via a malformed command, which triggers an invalid free.

Affected products

• Fedoraproject Fedora: version 25 only
• GNU Ed: up to and including 1.14

Published 2017-02-17. Last modified 2026-06-17.