CVE-2022-40320

CVE-2022-40320 affects libconfuse: cfg_tilde_expand in confuse.c of libConfuse 3.3 has a heap-based buffer over-read. Multiple advisories indicate affected packages and available patches (e.g., Mariner/SUSE/Amazon Linux advisories reference a patched version; Nessus entries note unpatched status ...

CVE-2018-14447

CVE-2018-14447 affects libConfuse up to version 3.2.1, with an out-of-bounds read in trim_whitespace() within lexer.l. The vulnerability is traced to the library’s handling in libConfuse 3.2.1, as reflected by NVD metrics (CVSSv2 base 6.8; CVSSv3 base 8.8). Fedora advisories document a fix to 3.2...

CVE-2018-19760

CVE-2018-19760 affects libConfuse 3.2.2. The vulnerability is in cfg_init (confuse.c) and is described as a memory leak. Connected documents confirm the memory leak issue across multiple sources (Ubuntu, SUSE, OSV, NVD, etc.). No concrete remediation or patched version is provided in the connecte...