PT-2023-36332 · Gnu · Gnu Indent

Published 2023-09-30 · Updated 2023-09-30 · CVE-2023--40305

PT · AI

Name of the Vulnerable Software and Affected Versions: GNU indent version 2.2.13

Description: The issue is related to a heap-based buffer overflow in the search brace function in indent.c via a crafted file, as well as a heap overread in the lexi() function.

Recommendations: For GNU indent version 2.2.13, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023--40305

MGASA-2023-0274

Affected Products

Gnu Indent

References · 4

• https://lists.fedoraproject.org/archives/list/[e-mail]/message/4MIUH3F63KQJWYR3FLKRZUYYRJOY6FYX · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0274.html · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40305 · Note
• https://bugs.mageia.org/show_bug.cgi?id=32273 · Note