GNU cflow parser.c parse_variable_declaration denial of service

CVE-2023-2789

Summary

In GNU cflow version 1.7, a vulnerability has been identified in the func_body/parse_variable_declaration function within the parser.c file. This vulnerability can be exploited to induce a denial of service, affecting the availability of the application. The issue has been publicly disclosed, and the vendor was notified prior to this disclosure but did not provide a response. Users are advised to pay attention to potential exposure to this vulnerability.

References