Lucene search

K
mageiaGentoo FoundationMGASA-2024-0122
HistoryApr 12, 2024 - 11:45 p.m.

Updated indent packages fix security vulnerability

2024-04-1223:45:19
Gentoo Foundation
advisories.mageia.org
18
indent
packages
security
vulnerability
flaw
c code
attacker
heap-based buffer overflow
crash
cve-2024-0911
unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

5.1%

A flaw was found in indent, a program for formatting C code. This issue may allow an attacker to trick a user into processing a specially crafted file to trigger a heap-based buffer overflow, causing the application to crash. (CVE-2024-0911)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchindent< 2.2.13-1.2indent-2.2.13-1.2.mga9

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

5.1%