CVE-2023-40305

GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.

• CWE-787

• https://ftp.gnu.org/gnu/indent/Product
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W6SL3NKMH5R4S5PD2O3MTC2UR4SBVHK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MIUH3F63KQJWYR3FLKRZUYYRJOY6FYX/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OB6GB6FUFPV5VJAZIANDG4YNNDW6JNXX/
• https://savannah.gnu.org/bugs/index.php?64503Exploit, Issue Tracking, Vendor Advisory
• https://ftp.gnu.org/gnu/indent/Product
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W6SL3NKMH5R4S5PD2O3MTC2UR4SBVHK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MIUH3F63KQJWYR3FLKRZUYYRJOY6FYX/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OB6GB6FUFPV5VJAZIANDG4YNNDW6JNXX/
• https://savannah.gnu.org/bugs/index.php?64503Exploit, Issue Tracking, Vendor Advisory

Published

Aug 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-40299Kong Insomnia 2023.4.0 on macOS allows attackers to execute …7.8
• CVE-2023-4030A vulnerability was reported in BIOS for ThinkPad P14s Gen 2…7.8
• CVE-2023-40300NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key.9.8
• CVE-2023-40301NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerabil…9.8
• CVE-2023-40302NETSCOUT nGeniusPULSE 3.8 has Weak File Permissions Vulnerab…9.1
• CVE-2023-40303GNU inetutils before 2.5 may allow privilege escalation beca…7.8
• CVE-2023-40306SAP S/4HANA Manage Catalog Items and Cross-Catalog searches …6.1
• CVE-2023-40307An attacker with standard privileges on macOS when requestin…7.8
• CVE-2023-40308SAP CommonCryptoLib allows an unauthenticated attacker to cr…7.5
• CVE-2023-40309SAP CommonCryptoLib does not perform necessary authenticatio…9.8
• CVE-2023-40310SAP PowerDesigner Client - version 16.7, does not sufficient…7.5
• CVE-2023-40311Multiple stored XSS were found on different JSP files with u…4.8