Skip to content
OpenAdvisories
Medium ELSA-2023-4347 1 CVE

Moderate: libeconf security update (Oracle Linux 9)

Published Aug 2, 2023 · Updated Aug 2, 2023

Ecosystem: Oracle Linux

Summary

[0.4.1-3]
- Fix stack-based buffer overflow in read_file(). Resolves: #2212467 (CVE-2023-22652)

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 libeconf 0:0.4.1-3.el9_2

Vulnerabilities 1

  • Low 3.3
    CVE-2023-22652

    Stack buffer overflow in "read_file" function

    A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.

    openSUSE libeconf libeconf libeconf Debian Ubuntu