918554 – (CVE-2022-48554) <sys-apps/file-5.42: stack buffer overread

Bug 918554 (CVE-2022-48554) - <sys-apps/file-5.42: stack buffer overread

Summary: <sys-apps/file-5.42: stack buffer overread

Status:	CONFIRMED

Alias:	CVE-2022-48554

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Gentoo Security

URL:	https://bugs.astron.com/view.php?id=310
Whiteboard:	A3 [glsa?]
Keywords:

Depends on:
Blocks:

Reported:	2023-11-25 19:49 UTC by John Helmert III
Modified:	2023-11-25 19:49 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description John Helmert III archtester

2023-11-25 19:49:25 UTC

CVE-2022-48554:

File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.

A fix isn't explicitly referenced, but upstream's tracker calls this fixed in >=5.42.