Merge pull request #609 from adammcclenaghan/fix-regex-redos-vuln

Fix regex which has exponential degree of ambiguity
rapid7 · Mar 22, 2024 · 569880c · 569880c
2 parents 17ce7c2 + 27a1257
commit 569880c
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/xml/sip_user_agents.xml b/xml/sip_user_agents.xml
@@ -312,7 +312,7 @@
     <param pos="2" name="hw.version"/>
   </fingerprint>
 
-  <fingerprint pattern="^PolycomRealPresenceGroup(\d+)/([\d\._]+)+$">
+  <fingerprint pattern="^PolycomRealPresenceGroup(\d+)/([\d\._]+)$">
     <description>Polycom RealPresence Group Video Conferencing</description>
     <example hw.model="700" hw.product="RealPresence Group 700" hw.version="6.2.0">PolycomRealPresenceGroup700/6.2.0</example>
     <param pos="0" name="hw.vendor" value="Polycom"/>
@@ -712,4 +712,4 @@
     <param pos="0" name="hw.device" value="Broadband Router"/>
   </fingerprint>
 
-</fingerprints>
+</fingerprints>