CVE-2022-1341

NameCVE-2022-1341
DescriptionAn issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in get_cmdln_options() function in src/options.c.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severitymedium

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
bwm-ng (PTS)stretch0.6.1-2vulnerable
buster0.6.1-6vulnerable
bullseye0.6.3-1fixed
bookworm, sid0.6.3-2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
bwm-ngsource(unstable)0.6.3-1unimportant

Notes

https://github.com/vgropp/bwm-ng/issues/26
https://github.com/vgropp/bwm-ng/commit/9774f23bf78a6e6d3ae4cfe3d73bad34f2fdcd17
No security impact

Search for package or bug name: Reporting problems