Lucene search
Copyright (C) 2024 Greenbone AGOPENVAS:1361412562310833846HistoryMar 04, 2024 - 12:00 a.m.
openSUSE: Security Advisory for libqb (SUSE-SU-2023:3944-1)
2024-03-0400:00:00
Copyright (C) 2024 Greenbone AG
plugins.openvas.org
6
opensuse
security
advisory
libqb
cve-2023-39976
buffer overflow
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
26.9%
The remote host is missing an update for the
# SPDX-FileCopyrightText: 2024 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.833846");
script_version("2024-05-16T05:05:35+0000");
script_cve_id("CVE-2023-39976");
script_tag(name:"cvss_base", value:"10.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
script_tag(name:"last_modification", value:"2024-05-16 05:05:35 +0000 (Thu, 16 May 2024)");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2023-08-10 16:09:41 +0000 (Thu, 10 Aug 2023)");
script_tag(name:"creation_date", value:"2024-03-04 07:34:02 +0000 (Mon, 04 Mar 2024)");
script_name("openSUSE: Security Advisory for libqb (SUSE-SU-2023:3944-1)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2024 Greenbone AG");
script_family("SuSE Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/suse", "ssh/login/rpms", re:"ssh/login/release=openSUSELeap15\.4");
script_xref(name:"Advisory-ID", value:"SUSE-SU-2023:3944-1");
script_xref(name:"URL", value:"https://lists.opensuse.org/archives/list/[email protected]/thread/V5G5PSHY6ZQ5SKXF44SIVVFNX6RU54B3");
script_tag(name:"summary", value:"The remote host is missing an update for the 'libqb'
package(s) announced via the SUSE-SU-2023:3944-1 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"This update for libqb fixes the following issues:
* CVE-2023-39976: Fixed potential bufferoverflow with long log messages
(bsc#1214066).
##");
script_tag(name:"affected", value:"'libqb' package(s) on openSUSE Leap 15.4.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "openSUSELeap15.4") {
if(!isnull(res = isrpmvuln(pkg:"libqb-devel", rpm:"libqb-devel~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"doxygen2man", rpm:"doxygen2man~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb-tools-debuginfo", rpm:"libqb-tools-debuginfo~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb100", rpm:"libqb100~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"doxygen2man-debuginfo", rpm:"doxygen2man-debuginfo~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb-debugsource", rpm:"libqb-debugsource~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb100-debuginfo", rpm:"libqb100-debuginfo~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb-tests-debuginfo", rpm:"libqb-tests-debuginfo~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb-tests", rpm:"libqb-tests~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb-tools", rpm:"libqb-tools~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb100-32bit-debuginfo", rpm:"libqb100-32bit-debuginfo~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb100-32bit", rpm:"libqb100-32bit~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb-devel-32bit", rpm:"libqb-devel-32bit~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb100-64bit", rpm:"libqb100-64bit~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb100-64bit-debuginfo", rpm:"libqb100-64bit-debuginfo~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb-devel-64bit", rpm:"libqb-devel-64bit~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb-devel", rpm:"libqb-devel~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"doxygen2man", rpm:"doxygen2man~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb-tools-debuginfo", rpm:"libqb-tools-debuginfo~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb100", rpm:"libqb100~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"doxygen2man-debuginfo", rpm:"doxygen2man-debuginfo~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb-debugsource", rpm:"libqb-debugsource~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb100-debuginfo", rpm:"libqb100-debuginfo~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb-tests-debuginfo", rpm:"libqb-tests-debuginfo~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb-tests", rpm:"libqb-tests~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb-tools", rpm:"libqb-tools~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb100-32bit-debuginfo", rpm:"libqb100-32bit-debuginfo~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb100-32bit", rpm:"libqb100-32bit~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb-devel-32bit", rpm:"libqb-devel-32bit~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb100-64bit", rpm:"libqb100-64bit~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb100-64bit-debuginfo", rpm:"libqb100-64bit-debuginfo~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libqb-devel-64bit", rpm:"libqb-devel-64bit~2.0.4+20211112.a2691b9~150400.4.3.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);Related
nessus
nessus
Oracle Linux 9 : libqb (ELSA-2023-6578)
2023-11-16 00:00:00
RHEL 9 : libqb (RHSA-2023:7376)
2023-11-21 00:00:00
RHEL 7 : libqb (Unpatched Vulnerability)
2024-05-11 00:00:00
openvas
openvas
Fedora: Security Advisory for libqb (FEDORA-2023-5a717dd33d)
2023-08-25 00:00:00
Mageia: Security Advisory (MGASA-2023-0339)
2023-12-05 00:00:00
Ubuntu: Security Advisory (USN-6308-1)
2023-08-29 00:00:00
cvelist
cvelist
CVE-2023-39976
2023-08-08 00:00:00
oraclelinux
oraclelinux
libqb security update
2023-11-11 00:00:00
osv
osv
CVE-2023-39976
2023-08-08 06:15:46
libqb vulnerability
2023-08-28 16:44:34
Moderate: libqb security update
2023-11-07 00:00:00
redhat
redhat
(RHSA-2023:6578) Moderate: libqb security update
2023-11-07 06:08:58
(RHSA-2023:5597) Moderate: libqb security update
2023-10-10 14:19:58
(RHSA-2023:7376) Moderate: libqb security update
2023-11-21 08:14:04
mageia
mageia
Updated libqb packages fix a security vulnerability
2023-12-04 23:37:23
nvd
nvd
CVE-2023-39976
2023-08-08 06:15:46
ibm
ibm
redhatcve
redhatcve
CVE-2023-39976
2023-08-21 06:48:58
ubuntu
ubuntu
Libqb vulnerability
2023-08-28 00:00:00
debiancve
debiancve
CVE-2023-39976
2023-08-08 06:15:46
almalinux
almalinux
Moderate: libqb security update
2023-11-07 00:00:00
veracode
veracode
Buffer Overflow
2023-08-09 11:57:46
cve
cve
CVE-2023-39976
2023-08-08 06:15:46
ubuntucve
ubuntucve
CVE-2023-39976
2023-08-08 00:00:00
prion
prion
Buffer overflow
2023-08-08 06:15:00
fedora
fedora
[SECURITY] Fedora 38 Update: libqb-2.0.8-1.fc38
2023-08-24 01:32:17
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
26.9%
Related for OPENVAS:1361412562310833846