Описание
GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.
A flaw was found in indent, a program for formatting C code. This flaw allows an attacker who can trick a user into processing a specially crafted file to trigger a heap-based buffer overflow, causing the application to crash.
Отчет
The indent program is not distributed in Red Hat Enterprise Linux 8 and 9. Therefore, these Red Hat Enterprise Linux versions are not affected.
Меры по смягчению последствий
Do not process untrusted files with the indent program.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | indent | Out of support scope | ||
| Red Hat Enterprise Linux 7 | indent | Out of support scope |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.
GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.
GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in ...
EPSS
5.5 Medium
CVSS3