CVE-2022-48554

File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.

Score

CVSS 3.1 5.5 Medium

Status

Modified - cve@mitre.org

Published

2023-08-22

Last modified

2024-08-03

Weaknesses

CWE-125

Affected products

• Debian Linux (Debian)
• File (File Project)

References

• http://seclists.org/fulldisclosure/2024/Mar/21
• http://seclists.org/fulldisclosure/2024/Mar/24
• http://seclists.org/fulldisclosure/2024/Mar/25
• https://bugs.astron.com/view.php?id=310
• https://security.netapp.com/advisory/ntap-20231116-0002/
• https://support.apple.com/kb/HT214081
• https://support.apple.com/kb/HT214084
• https://support.apple.com/kb/HT214086
• https://support.apple.com/kb/HT214088
• https://www.debian.org/security/2023/dsa-5489