CVE-2023-4039

🗓️ 13 Sep 2023 08:05:10Reported by Debian Security Bug TrackerType

A failure in GCC-based toolchains allows buffer overflow without detection, leading to loss of availability and potential control of program flow

Reporter	Title	Published	Views	Family All 122
IBM Security Bulletins	Security Bulletin: Order Management is subject to various OS vulnerabilites which could have allowed attacker various entry points into application.	29 Apr 202502:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data 4.8.1 has addressed security vulnerabilities	26 Dec 202321:15	–	ibm
ATTACKERKB	CVE-2023-4039	13 Sep 202309:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : cpp, gcc, gcc-c++ (ALAS2023-2023-342)	13 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : gcc10 (ALAS-2023-2244)	13 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : gcc (ALAS-2023-2245)	13 Sep 202300:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: gcc (CVE-2023-4039)	10 Feb 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : gcc (EulerOS-SA-2023-3174)	16 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : gcc (EulerOS-SA-2023-3209)	16 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : gcc (EulerOS-SA-2023-3296)	16 Jan 202400:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	any	gcc-10	10.2.1-6	gcc-10_10.2.1-6_any.deb
Debian	999	any	gcc-11	11.4.0-4	gcc-11_11.4.0-4_any.deb
Debian	12	any	gcc-11	11.3.0-12	gcc-11_11.3.0-12_any.deb
Debian	12	any	gcc-12	12.2.0-14+deb12u1	gcc-12_12.2.0-14+deb12u1_any.deb
Debian	13	any	gcc-12	12.3.0-9	gcc-12_12.3.0-9_any.deb
Debian	14	any	gcc-12	12.3.0-9	gcc-12_12.3.0-9_any.deb
Debian	999	any	gcc-12	12.3.0-9	gcc-12_12.3.0-9_any.deb
Debian	13	any	gcc-13	13.2.0-4	gcc-13_13.2.0-4_any.deb
Debian	14	any	gcc-13	13.2.0-4	gcc-13_13.2.0-4_any.deb
Debian	999	any	gcc-13	13.2.0-4	gcc-13_13.2.0-4_any.deb

13 Sep 2023 08:05Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.14.8

EPSS0.00666

SSVC