PT-2023-18604 · Opensuse+6 · Libeconf+6

Yangjiageng

·

Publicado

2023-06-01

·

Atualizado

2026-06-02

·

CVE-2023-22652

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions libeconf versions prior to 0.5.2
Description A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to Denial of Service (DoS) via malformed config files.
Recommendations For versions prior to 0.5.2, update to version 0.5.2 or later to resolve the issue. As a temporary workaround, consider restricting access to malformed config files to minimize the risk of exploitation.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

ALSA-2023:4347
CVE-2023-22652
DLA-4164-1
OPENSUSE-SU-2023_3954-1
RHSA-2023:4347
RHSA-2023_4347
RLSA-2023:4347
SUSE-SU-2023:3639-1
SUSE-SU-2023:3954-1
SUSE-SU-2023:3954-2
SUSE-SU-2023_3954-1
SUSE-SU-2024:2426-1
USN-8368-1

Produtos afetados

Almalinux
Debian
Red Hat
Red Os
Rocky Linux
Suse
Libeconf