CVE-2022-48554 Memory corruption in n/a
A stack-based buffer over-read in the file utility library allows attackers to cause denial of service or disclose sensitive memory contents.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2022-48554?
CVE-2022-48554 is a medium-severity memory corruption vulnerability in Debian Debian Linux, published on 22 Aug 2023. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.
Weakness: CWE-125
Which versions are affected by CVE-2022-48554?
It affects 2 products.
Linux distribution packages (15)
file AlmaLinux:9 | All versions | 5.39-16.el9 |
file-devel AlmaLinux:9 | All versions | 5.39-16.el9 |
file-libs AlmaLinux:9 | All versions | 5.39-16.el9 |
python3-file-magic AlmaLinux:9 | All versions | 5.39-16.el9 |
python3-file-magic Red Hat:enterprise_linux:9::appstream | All versions | 0:5.39-16.el9 |
file Red Hat:enterprise_linux:9::baseos | All versions | 0:5.39-16.el9 |
file-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:5.39-16.el9 |
file-debugsource Red Hat:enterprise_linux:9::baseos | All versions | 0:5.39-16.el9 |
file-libs Red Hat:enterprise_linux:9::baseos | All versions | 0:5.39-16.el9 |
file-libs-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:5.39-16.el9 |
file-debuginfo Red Hat:enterprise_linux:9::crb | All versions | 0:5.39-16.el9 |
file-debugsource Red Hat:enterprise_linux:9::crb | All versions | 0:5.39-16.el9 |
file-devel Red Hat:enterprise_linux:9::crb | All versions | 0:5.39-16.el9 |
file-libs-debuginfo Red Hat:enterprise_linux:9::crb | All versions | 0:5.39-16.el9 |
file Rocky Linux:9 | All versions | 0:5.39-16.el9 |
Products include Debian Debian Linux, File Project File.
How do I fix CVE-2022-48554?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-48554 being exploited?
There is no known exploitation of CVE-2022-48554 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALSA-2024:2512, AZL-28055, CLSA-2024-1717691179, DEBIAN-CVE-2022-48554, DSA-5489-1, GHSA-wpfg-7xq2-mv49 and 6 more.