Bug ID 1201211
Summary VUL-0: CVE-2022-230: chafa: Buffer Over-read
Classification openSUSE
Product openSUSE Distribution
Version Leap 15.4
Hardware Other
URL https://smash.suse.de/issue/336250/
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component Security
Assignee jubalh@iodoru.org
Reporter cathy.hu@suse.com
QA Contact security-team@suse.de
Found By Security Response Team
Blocker ---

rh#2103678

Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3.

https://github.com/hpjansson/chafa/commit/56fabfa18a6880b4cb66047fa6557920078048d9
https://huntr.dev/bounties/f6b9114b-671d-4948-b946-ffe5c9aeb816

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2103678
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-2301
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2301
https://github.com/hpjansson/chafa/commit/56fabfa18a6880b4cb66047fa6557920078048d9
https://huntr.dev/bounties/f6b9114b-671d-4948-b946-ffe5c9aeb816


You are receiving this mail because: