Summary
David Gstir discovered that libcap2 incorrectly handled certain return
codes. An attacker could possibly use this issue to cause libcap2 to
consume memory, leading to a denial of service. (CVE-2023-2602)
Richard Weinberger discovered that libcap2 incorrectly handled certain long
input strings. An attacker could use this issue to cause libcap2 to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2023-2603)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | libcap2 | 1:2.32-1ubuntu0.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | libcap2 | 1:2.44-1ubuntu0.22.04.1 |
Vulnerabilities 2
-
High 7.8CVE-2023-2603 Public exploit
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer over…
-
Unscored —
A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cau…