NA

CVE-2023-40305

Published: 14/08/2023 Updated: 07/11/2023
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 0

Vulnerability Summary

GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.

Vulnerable Product Search on Vulmon Subscribe to Product

gnu indent 2.2.13

Vendor Advisories

Debian Bug report logs - #1049366 indent: CVE-2023-40305 Package: src:indent; Maintainer for src:indent is Santiago Vila <sanvila@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 14 Aug 2023 18:54:02 UTC Severity: important Tags: security, upstream Found in versions indent/2212-4+deb12 ...
GNU indent 2213 has a heap-based buffer overflow in search_brace in indentc via a crafted file (CVE-2023-40305) ...
Description<!---->A flaw was found in indent, a program for formatting C code This flaw allows an attacker who can trick a user into processing a specially crafted file to trigger a heap-based buffer overflow, causing the application to crashA flaw was found in indent, a program for formatting C code This flaw allows an attacker who can trick a ...