Debian Libconfuse vulnerabilities

1 known vulnerability affecting debian/libconfuse.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-40320HIGHCVSS 8.8fixed in libconfuse 3.3-3 (bookworm)2022

CVE-2022-40320 [HIGH] CVE-2022-40320: libconfuse - cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-rea... cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read. Scope: local bookworm: resolved (fixed in 3.3-3) bullseye: resolved (fixed in 3.3-2+deb11u1) forky: resolved (fixed in 3.3-3) sid: resolved (fixed in 3.3-3) trixie: resolved (fixed in 3.3-3)