CVE-2023-40305

GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.

Score

CVSS 3.1 5.5 Medium

Status

Modified - cve@mitre.org

Published

2023-08-14

Last modified

2024-10-09

Weaknesses

CWE-787

Affected products

• Indent (Gnu)

References

• https://ftp.gnu.org/gnu/indent/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W6SL3NKMH5R4S5PD2O3MT…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MIUH3F63KQJWYR3FLKRZU…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OB6GB6FUFPV5VJAZIANDG4…
• https://savannah.gnu.org/bugs/index.php?64503