USN-6389-1: Indent vulnerability
Published Sep 20, 2023
·Updated
It was discovered that Indent incorrectly handled parsing certain source files. If a user or automated system were tricked into processing a specially crafted source file, a remote attacker could use this issue to cause Indent to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
6 affected componentsFixes available
All of the following
ubuntu/indent<2.2.12-4ubuntu0.1
2.2.12-4ubuntu0.1
Ubuntu Ubuntu=23.04
All of the following
ubuntu/indent<2.2.12-1ubuntu0.22.04.1
2.2.12-1ubuntu0.22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/indent<2.2.12-1ubuntu0.20.04.1
2.2.12-1ubuntu0.20.04.1
Ubuntu Ubuntu=20.04
Event History
Sep 20, 2023
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is USN-6389-1.
2
What is the title of the vulnerability?
The title of the vulnerability is Indent vulnerability.
3
How can this vulnerability be exploited?
This vulnerability can be exploited by tricking a user or automated system into processing a specially crafted source file.
4
What is the impact of this vulnerability?
The impact of this vulnerability is a denial of service or potentially the execution of arbitrary code.
5
How can I fix this vulnerability?
To fix this vulnerability, update the indent package to the specified version for your Ubuntu release.