Logo
vulnerabilityCVE-2023-40305
Name
CVE-2023-40305
Source
NVD ( link)Debian ( link)
Description
GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
indent
Patched

Vulnerability Ratings#


5.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
yocto
master
2.2.13
Patched
yocto
scarthgap
2.2.12
Patched

Resolved with patches#


indent (yocto:kirkstone)

#
Title
Author
Resolve
1
Fix an out-of-buffer read in search_brace()/lexi() on an
Petr Písař <ppisar@redhat.com>
CVE-2023-40305
2
Fix a heap buffer overwrite in search_brace()
Petr Písař <ppisar@redhat.com>
CVE-2023-40305

indent (yocto:master)

#
Title
Author
Resolve
1
Fix an out-of-buffer read in search_brace()/lexi() on an
Petr Písař <ppisar@redhat.com>
CVE-2023-40305
2
Fix a heap buffer overwrite in search_brace()
Petr Písař <ppisar@redhat.com>
CVE-2023-40305

indent (yocto:scarthgap)

#
Title
Author
Resolve
1
Fix an out-of-buffer read in search_brace()/lexi() on an
Petr Písař <ppisar@redhat.com>
CVE-2023-40305
2
Fix a heap buffer overwrite in search_brace()
Petr Písař <ppisar@redhat.com>
CVE-2023-40305