Description
File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.
References (10)
Core 10
Core References
Exploit, Vendor Advisory
https://bugs.astron.com/view.php?id=310
Third Party Advisory
https://security.netapp.com/advisory/ntap-20231116-0002/
Vendor Advisory
https://support.apple.com/kb/HT214081
Vendor Advisory
https://support.apple.com/kb/HT214084
Vendor Advisory
https://support.apple.com/kb/HT214086
Vendor Advisory
https://support.apple.com/kb/HT214088
Third Party Advisory vendor-advisory
https://www.debian.org/security/2023/dsa-5489
Mailing List mailing-list
http://seclists.org/fulldisclosure/2024/Mar/21
Mailing List mailing-list
http://seclists.org/fulldisclosure/2024/Mar/25
Mailing List mailing-list
http://seclists.org/fulldisclosure/2024/Mar/24
Scores
CVSS v3
5.5
EPSS
0.0002
EPSS Percentile
6.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-125
Status
published
Products (2)
debian/debian_linux
11.0
file_project/file
5.41
Published
Aug 22, 2023
Tracked Since
Feb 18, 2026