← All advisories

Unrated severityNVD Advisory· Published Aug 22, 2023· Updated Aug 3, 2024

CVE-2022-48554

CVE-2022-48554

Description

File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

File Project/Filecpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <5.43
osv-coords4 versions
pkg:rpm/almalinux/file pkg:rpm/almalinux/file-devel pkg:rpm/almalinux/file-libs pkg:rpm/almalinux/python3-file-magic
< 5.39-16.el9+ 3 more
- (no CPE)range: < 5.39-16.el9
- (no CPE)range: < 5.39-16.el9
- (no CPE)range: < 5.39-16.el9
- (no CPE)range: < 5.39-16.el9

Patches

Vulnerability mechanics

References

10

www.debian.org/security/2023/dsa-5489mitrevendor-advisory
seclists.org/fulldisclosure/2024/Mar/21mitremailing-list
seclists.org/fulldisclosure/2024/Mar/24mitremailing-list
seclists.org/fulldisclosure/2024/Mar/25mitremailing-list
bugs.astron.com/view.phpmitre
security.netapp.com/advisory/ntap-20231116-0002/mitre
support.apple.com/kb/HT214081mitre
support.apple.com/kb/HT214084mitre
support.apple.com/kb/HT214086mitre
support.apple.com/kb/HT214088mitre

News mentions

0

No linked articles in our index yet.