PT-2023-8920 · Libpcap+10 · Libpcap+10

Juneau · Published 2023-05-15 · Updated 2025-04-24 · CVE-2023-2603

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libcap (affected versions not specified)

Description A vulnerability was found in libcap, specifically in the libcap strdup() function, which can lead to an integer overflow if the input string is close to 4GiB. This issue may allow an attacker to execute arbitrary PHP files on a server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALSA-2023:4524

ALSA-2023:5071

ALT-PU-2024-5948

ALT-PU-2024-8916

AZL-27065

BDU:2024-02623

CESA-2023_4524

CVE-2023-2603

DLA-4092-1

INFSA-2023_5071

MGASA-2023-0205

OESA-2023-1342

OESA-2023-1343

OESA-2023-1344

OESA-2023-1345

OPENSUSE-SU-2023_2956-1

OPENSUSE-SU-2024:12945-1

RHSA-2023:4524

RHSA-2023:5071

RHSA-2023:7400

RHSA-2023_4524

RHSA-2023_5071

RHSA-2024:0436

RLSA-2023:4524

SUSE-SU-2023:2764-1

SUSE-SU-2023:2765-1

SUSE-SU-2023:2956-1

SUSE-SU-2023_2764-1

SUSE-SU-2023_2956-1

USN-6166-1

USN-6166-2

Affected Products

Alt Linux

Almalinux

Centos

Debian

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Libpcap

References · 73

• 🔥 https://x41-dsec.de/static/reports/X41-libcap-Code-Review-2023-OSTIF-Final-Report.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-2603 · Security Note
• https://linux.oracle.com/errata/ELSA-2023-5071.html · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4092-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ57ICDLMVYEREXQGZWL4GWI7FRJCRQT · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2602 · Security Note
• https://errata.rockylinux.org/RLSA-2023:4524 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02623 · Security Note
• https://ubuntu.com/security/notices/USN-6166-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6166-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0205.html · Security Note
• https://osv.dev/vulnerability/MGASA-2023-0205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2603 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2764-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2765-1 · Vendor Advisory