Most recent entries from all

ALSA-2023:4347 — Moderate: libeconf security update

Affected: AlmaLinux:9: libeconf

Libeconf is a highly flexible and configurable library to parse and manage key=value configuration files. It reads configuration file snippets from different directories and builds the final configuration file from it.

Security Fix(es):

* libeconf: stack-based buffer overflow in read_file() in lib/getfilecontents.c (CVE-2023-22652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BELL-CVE-2023-22652

Affected: Alpaquita:23: libeconf

certfr-2023-avi-0957 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de RedHat. Certaines d'…

certfr-2023-avi-0957

EUVD-2026-239025

fkie_cve-2023-22652

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.

GHSA-rgj6-mpw9-qm58

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.

gsd-2023-22652

RHSA-2023:4347 — Red Hat Security Advisory: libeconf security update

libeconf: stack-based buffer overflow in read_file() in lib/getfilecontents.c libeconf: Stack overflow in function read_file at libeconf/lib/getfilecontents.c

SUSE-SU-2023:3639-1 — Security update for libeconf

Security update for libeconf

UBUNTU-CVE-2023-22652

Affected: Ubuntu:22.04:LTS: libeconf

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.

WID-SEC-W-2023-1936 — Red Hat Enterprise Linux (libeconf): Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.