Summary
It was discovered that Indent incorrectly handled parsing certain source
files. If a user or automated system were tricked into processing a
specially crafted source file, a remote attacker could use this issue to
cause Indent to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | indent | 2.2.12-1ubuntu0.20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | indent | 2.2.12-1ubuntu0.22.04.1 |
Vulnerabilities 1
-
Unscored —
GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.
References
-
report
https://ubuntu.com/security/CVE-2023-40305