Skip to content
OpenAdvisories
Medium RLSA-2023:4347 2 CVEs

Moderate: libeconf security update

Published Oct 6, 2023 · Updated Feb 5, 2026

Ecosystem: Rocky Linux

Summary

Libeconf is a highly flexible and configurable library to parse and manage key=value configuration files. It reads configuration file snippets from different directories and builds the final configuration file from it.

Security Fix(es):

* libeconf: stack-based buffer overflow in read_file() in lib/getfilecontents.c (CVE-2023-22652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 libeconf 0:0.4.1-3.el9_2

Vulnerabilities 2

  • High 8.8
    CVE-2023-30079 Rejected

    DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-22652. Reason: This record is a duplicate of CVE-2023-22652. Notes: Al…

  • Low 3.3
    CVE-2023-22652

    Stack buffer overflow in "read_file" function

    A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.

    openSUSE libeconf libeconf libeconf Debian Ubuntu

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2212463