CVE Catalog

CVE-2023-40305

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.42%

34th percentile - higher than 34% of all known CVEs

Summary

GNU indent version 2.2.13 has a heap-based buffer overflow vulnerability in the search_brace function in indent.c, which can be exploited via a crafted file.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized memory access, potentially resulting in arbitrary code execution or application crashes.

Recommendation

It is recommended to update to the latest version of GNU indent to mitigate this vulnerability and to monitor systems for potential exploitation attempts.

Original NVD description (English source)

GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS