Red Hat Security Advisory: libcap security update

Fixed packages 4

Vulnerabilities 2

• High 7.8
  CVE-2023-2603 Public exploit

  A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer over…

  libcap2 libcap2 libcap libcap Debian Ubuntu Azure Linux Alpine
  Jun 6, 2023
• Unscored —
  CVE-2023-2602

  A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cau…

  libcap2 libcap libcap2 libcap Debian Ubuntu Azure Linux Alpine
  Jun 6, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2209113
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2209114
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7400.json
• report
  https://access.redhat.com/security/cve/CVE-2023-2602
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2602
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2602
• article
  https://www.x41-dsec.de/static/reports/X41-libcap-Code-Review-2023-OSTIF-Final-Report.pdf
• report
  https://access.redhat.com/security/cve/CVE-2023-2603
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2603
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2603