GNOME (libcue): Schwachstelle ermöglicht Codeausführung

Summary

Product

Vulnerabilities 1

• High 8.8
  CVE-2023-43641 EPSS 17%

  libcue vulnerable to out-of-bounds array access

  libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Becaus…

  lipnitsk libcue libcue libcue Debian Ubuntu Alpine
  Oct 9, 2023

Revision history

1. 2023-10-17 #6

   Neue Updates von Ubuntu aufgenommen

2. 2023-10-16 #5

   Neue Updates von SUSE aufgenommen

3. 2023-10-15 #4

   libcue im Titel ergänzt

4. 2023-10-11 #3

   Neue Updates von Fedora und Debian aufgenommen

5. 2023-10-10 #2

   Neue Updates von Gentoo, Red Hat und Fedora aufgenommen

6. 2023-10-09 #1

   Initiale Fassung

References

• Ubuntu Security Notice USN-6423-2 vom 2023-10-17
  https://ubuntu.com/security/notices/USN-6423-2
• SUSE Security Update SUSE-SU-2023:4090-1 vom 2023-10-17
  https://lists.suse.com/pipermail/sle-security-updates/2023-October/016705.html
• Fedora Security Advisory FEDORA-EPEL-2023-B4FC9C3FDB vom 2023-10-12
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-b4fc9c3fdb
• Debian Security Advisory DSA-5524 vom 2023-10-12
  https://www.debian.org/security/2023/dsa-5524
• Debian Security Advisory DLA-3615 vom 2023-10-12
  https://lists.debian.org/debian-lts-announce/2023/10/msg00018.html
• Fedora Security Advisory FEDORA-EPEL-2023-B5D558AB14 vom 2023-10-12
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-b5d558ab14
• Fedora Security Advisory FEDORA-EPEL-2023-2B36013026 vom 2023-10-12
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-2b36013026
• Fedora Security Advisory FEDORA-2023-EEC9CE5935 vom 2023-10-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-eec9ce5935
• Fedora Security Advisory FEDORA-2023-F4E74A94A2 vom 2023-10-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-f4e74a94a2
• Fedora Security Advisory FEDORA-2023-1FE05AC8D9 vom 2023-10-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-1fe05ac8d9
• Gentoo Linux Security Advisory GLSA-202310-10 vom 2023-10-10
  https://security.gentoo.org/glsa/202310-10
• Fedora Security Advisory FEDORA-2023-E8F45C67F5 vom 2023-10-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-e8f45c67f5
• Fedora Security Advisory FEDORA-2023-40044895CE vom 2023-10-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-40044895ce
• National Vulnerability Database vom 2023-10-09
  https://nvd.nist.gov/vuln/detail/CVE-2023-43641
• Ubuntu Security Notice USN-6423-1 vom 2023-10-09
  https://ubuntu.com/security/notices/USN-6423-1
• Github Security Blog vom 2023-10-09
  https://github.blog/2023-10-09-coordinated-disclosure-1-click-rce-on-gnome-cve-2023-43641/