Skip to content
OpenAdvisories
Low ALAS2023-2024-504 1 CVE

Low: indent security update (Amazon Linux 2023)

Published Feb 1, 2024 · Updated Feb 6, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-0911: A flaw was found in Indent. This issue may allow a local user to use a specially-crafted file to trigger a heap-based buffer overflow, which can lead to an application crash.

Fixed packages 3

ReleasePackageFixed in
Amazon Linux · 2023 indent 0:2.2.12-7.amzn2023.0.6
Amazon Linux · 2023 indent-debuginfo 0:2.2.12-7.amzn2023.0.6
Amazon Linux · 2023 indent-debugsource 0:2.2.12-7.amzn2023.0.6

Vulnerabilities 1

  • Medium 5.5
    CVE-2024-0911

    Indent: heap-based buffer overflow in set_buf_break()

    A flaw was found in indent, a program for formatting C code. This issue may allow an attacker to trick a user into processing a specially crafted file to trigger a heap-based buffer overflow, causing the application to crash.

    indent indent indent Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-0911.html