PT-2023-5873 · Libcue +6 · Libcue +6

🗓️ 09 Oct 2023 00:00:00Reported by Positive TechnologiesType

Libcue out-of-bounds access enables code execution from a malicious cue sheet; upgrade to version 2.3.0.

Reporter	Title	Published	Views	Family All 72
FreeBSD	libcue -- out-of-bounds array access	9 Oct 202300:00	–	freebsd
AlpineLinux	CVE-2023-43641	9 Oct 202321:01	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в libcue	3 May 202623:59	–	astralinux
Circl	CVE-2023-43641	9 Oct 202321:49	–	circl
CNNVD	libcue buffer error vulnerability	9 Oct 202300:00	–	cnnvd
CVE	CVE-2023-43641	9 Oct 202321:01	–	cve
Cvelist	CVE-2023-43641 libcue vulnerable to out-of-bounds array access	9 Oct 202321:01	–	cvelist
Debian	[SECURITY] [DLA 3615-1] libcue security update	11 Oct 202322:14	–	debian
Debian	[SECURITY] [DSA 5524-1] libcue security update	11 Oct 202318:13	–	debian
Debian CVE	CVE-2023-43641	9 Oct 202321:01	–	debiancve

Source	Link
github	www.github.com/lipnitsk/libcue/security/advisories/GHSA-5982-x7hv-r9cj
github	www.github.blog/2023-10-09-coordinated-disclosure-1-click-rce-on-gnome-cve-2023-43641
github	www.github.com/lipnitsk/libcue/commit/cfb98a060fd79dbc3463d85f0f29c3c335dfa0ea
github	www.github.com/lipnitsk/libcue/commit/fdf72c8bded8d24cfa0608b8e97f2eed210a920e
ubuntu	www.ubuntu.com/security/CVE-2023-43641
errata	www.errata.altlinux.org/ALT-PU-2023-6273
osv	www.osv.dev/vulnerability/DSA-5524-1
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates
osv	www.osv.dev/vulnerability/SUSE-SU-2023:4090-1
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/PGQOMFDBXGM3DOICCXKCUS76OTKTSPMN

31 Jul 2024 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 210

CVSS 3.18.8

EPSS0.80301

SSVC