CVE-2024-0911

2024-02-0615:15:08

Alpine Linux Development Team

security.alpinelinux.org

cve-2024-0911

unix

buffer overflow

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.4

Confidence

High

EPSS

Percentile

5.1%

JSON

A flaw was found in indent, a program for formatting C code. This issue may allow an attacker to trick a user into processing a specially crafted file to trigger a heap-based buffer overflow, causing the application to crash.

OSVersionArchitecturePackageVersionFilename
Alpineedge-mainnoarchindent= 2.2.13-r2UNKNOWN
Alpine3.19-mainnoarchindent= 2.2.13-r2UNKNOWN
Alpine3.18-mainnoarchindent= 2.2.13-r1UNKNOWN
Alpine3.20-mainnoarchindent= 2.2.13-r2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-main	noarch	indent	= 2.2.13-r2	UNKNOWN
Alpine	3.19-main	noarch	indent	= 2.2.13-r2	UNKNOWN
Alpine	3.18-main	noarch	indent	= 2.2.13-r1	UNKNOWN
Alpine	3.20-main	noarch	indent	= 2.2.13-r2	UNKNOWN