CVE-2022-40320

cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2022-09-09

Last modified

2024-08-03

Weaknesses

CWE-125

Affected products

• Fedora (Fedoraproject)
• Libconfuse (Libconfuse Project)

References

• https://github.com/libconfuse/libconfuse/issues/163
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BSAZK4KAWRWNAFUBBXOYU3…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EDUT2V62V2XF2IT5TJFPB6…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FJKHAPJ6AUWVP4HDGKH4M5…