Skip to content
OpenAdvisories
Low USN-8368-1 1 CVE

libeconf vulnerability

Published Jun 2, 2026 · Updated Jun 2, 2026

Ecosystem: Ubuntu

Summary

It was discovered that libeconf did not properly check the size of
input when copying data to a buffer. An attacker could possibly use
this issue to cause libeconf to crash, resulting in a denial of
service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS libeconf 0.3.8-1+deb11u1build0.22.04.1

Vulnerabilities 1

  • Low 3.3
    CVE-2023-22652

    Stack buffer overflow in "read_file" function

    A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.

    openSUSE libeconf libeconf libeconf Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2023-22652