Skip to content
OpenAdvisories
Low ALAS2-2024-2439 1 CVE

Low: indent security update (Amazon Linux 2)

Published Feb 1, 2024 · Updated Feb 1, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-0911: A flaw was found in Indent. This issue may allow a local user to use a specially-crafted file to trigger a heap-based buffer overflow, which can lead to an application crash.

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 indent 0:2.2.11-13.amzn2.0.4
Amazon Linux · 2 indent-debuginfo 0:2.2.11-13.amzn2.0.4

Vulnerabilities 1

  • Medium 5.5
    CVE-2024-0911

    Indent: heap-based buffer overflow in set_buf_break()

    A flaw was found in indent, a program for formatting C code. This issue may allow an attacker to trick a user into processing a specially crafted file to trigger a heap-based buffer overflow, causing the application to crash.

    indent indent indent Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-0911.html