HIGH
cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read
Published Sep 9, 2022
8.8
HIGHCVSS 3.1
EPSS 1.33%
Description
cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.
Affected products
No data.
Configuration 1
- 3.3
Configuration 2
OR
- 35
- 36
- 37
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- https://github.com/libconfuse/libconfuse/issues/163 x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BSAZK4KAWRWNAFUBBXOYU3PVNH3X7226/ vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EDUT2V62V2XF2IT5TJFPB6P3EQ6X5VLL/ vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FJKHAPJ6AUWVP4HDGKH4M5A2XXWQI73O/ vendor-advisoryx_refsource_FEDORA
| Link | Providers | Tags |
|---|---|---|
| https://github.com/libconfuse/libconfuse/issues/163 | x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory | |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BSAZK4KAWRWNAFUBBXOYU3PVNH3X7226/ | vendor-advisoryx_refsource_FEDORA | |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EDUT2V62V2XF2IT5TJFPB6P3EQ6X5VLL/ | vendor-advisoryx_refsource_FEDORA | |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FJKHAPJ6AUWVP4HDGKH4M5A2XXWQI73O/ | vendor-advisoryx_refsource_FEDORA |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Sep 9, 2022
Updated Aug 3, 2024
Reserved Sep 9, 2022
Link CVE-2022-40320
CISA Vulnrichment
Updated n/a