Most recent entries from all

bdu:2022-05795

EUVD-2026-19329

fkie_cve-2022-40320

cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.

GHSA-4f2q-2458-j6j8

cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.

gsd-2022-40320

msrc_CVE-2022-40320 — cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.

msrc_CVE-2022-40320

OESA-2022-1928 — libconfuse security update

Affected: openEuler:20.03-LTS-SP1: libconfuse, openEuler:20.03-LTS-SP3: libconfuse, openEuler:22.03-LTS: libconfuse

libConfuse is a configuration file parser library, licensed under the terms of the ISC license, and written in C. It supports sections and (lists of) values (strings, integers, floats, booleans or other sections), as well as some other features (such as single/double-quoted strings, environment variable expansion, functions and nested include statements). It makes it very easy to add configuration file capability to a program using a simple API. The goal of libConfuse is not to be the configuration file parser library with a gazillion of features. Instead, it aims to be easy to use and quick to integrate with your code. Security Fix(es): cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.(CVE-2022-40320)

openSUSE-SU-2024:12324-1 — libconfuse-devel-3.3-2.1 on GA media

libconfuse-devel-3.3-2.1 on GA media

SUSE-SU-2022:3331-1 — Security update for libconfuse0

Security update for libconfuse0

UBUNTU-CVE-2022-40320

Affected: Ubuntu:22.04:LTS: libconfuse, Ubuntu:24.04:LTS: libconfuse, Ubuntu:25.10: libconfuse, Ubuntu:26.10: libconfuse, Ubuntu:26.04:LTS: libconfuse

cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.