Skip to content
OpenAdvisories
High RHSA-2023:4347 2 CVEs

Red Hat Security Advisory: libeconf security update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::baseos libeconf 0:0.4.1-3.el9_2
Red Hat · RHEL 9 enterprise_linux:9::baseos libeconf-debuginfo 0:0.4.1-3.el9_2
Red Hat · RHEL 9 enterprise_linux:9::baseos libeconf-debugsource 0:0.4.1-3.el9_2
Red Hat · RHEL 9 enterprise_linux:9::baseos libeconf-utils-debuginfo 0:0.4.1-3.el9_2

Vulnerabilities 2

  • High 8.8
    CVE-2023-30079 Rejected

    DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-22652. Reason: This record is a duplicate of CVE-2023-22652. Notes: Al…

  • Low 3.3
    CVE-2023-22652

    Stack buffer overflow in "read_file" function

    A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.

    openSUSE libeconf libeconf libeconf Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2212463
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4347.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-22652
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-22652
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-22652
  • report
    https://access.redhat.com/security/cve/CVE-2023-30079
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2234595
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-30079
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-30079