search

MidnightBSD / src

MidnightBSD OS source code
https://www.midnightbsd.org/
Other
55 stars 6 forks source link

CVE-2022-48554 (Medium) detected in fileFILE5_41 #187

Closed mend-bolt-for-github[bot] closed 1 year ago

mend-bolt-for-github[bot] commented 1 year ago

CVE-2022-48554 - Medium Severity Vulnerability

Vulnerable Library - fileFILE5_41

Read-only mirror of file CVS repository, updated every half hour. NOTE: do not make pull requests here, nor comment any commits, submit them usual way to bug tracker or to the mailing list. Maintainer(s) are not tracking this git mirror.

Library home page: https://github.com/file/file.git

Found in base branch: stable/3.0

Vulnerable Source Files (1)

/funcs.c

Vulnerability Details

File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.

Publish Date: 2023-08-22

URL: CVE-2022-48554

CVSS 3 Score Details (5.5)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: Low - Privileges Required: None - User Interaction: Required - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://bugs.astron.com/view.php?id=310

Release Date: 2023-08-22

Fix Resolution: FILE5_42

Step up your Open Source Security Game with Mend here

laffer1 commented 1 year ago

This is already fixed in master and stable/3.1. closing.