Lucene search
Redhat.comRH:CVE-2023-24056HistoryJan 27, 2023 - 1:35 p.m.
CVE-2023-24056
2023-01-2713:35:26
redhat.com
access.redhat.com
61
pkgconf
variable duplication
unbounded string expansion
buffer overflow
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.0005 Low
EPSS
Percentile
18.4%
A flaw was found in pkgconf, where a variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. This issue may lead to a buffer overflow, which can crash the software.
Related
veracode
veracode
Denial Of Service (DoS)
2023-01-26 04:16:50
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0077)
2023-03-28 00:00:00
Huawei EulerOS: Security Advisory for pkgconf (EulerOS-SA-2023-1787)
2023-05-08 00:00:00
Huawei EulerOS: Security Advisory for pkgconf (EulerOS-SA-2023-2110)
2023-06-07 00:00:00
nessus
nessus
RHEL 8 : pkgconf (Unpatched Vulnerability)
2024-05-11 00:00:00
openSUSE 15 Security Update : pkgconf (openSUSE-SU-2023:0043-1)
2023-02-14 00:00:00
EulerOS 2.0 SP8 : pkgconf (EulerOS-SA-2023-1604)
2023-04-13 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-24056 affecting package pkgconf for versions less than 1.8.0-3
2023-02-14 20:36:04
cgr
cgr
CVE-2023-24056 vulnerabilities
2024-05-19 03:07:16
osv
osv
CVE-2023-24056
2023-01-22 04:15:11
ubuntucve
ubuntucve
CVE-2023-24056
2023-01-22 00:00:00
prion
prion
Design/Logic Flaw
2023-01-22 04:15:00
alpinelinux
alpinelinux
CVE-2023-24056
2023-01-22 04:15:11
cve
cve
CVE-2023-24056
2023-01-22 04:15:11
mageia
mageia
Updated pkgconf packages fix security vulnerability
2023-03-02 00:14:31
nvd
nvd
CVE-2023-24056
2023-01-22 04:15:11
debiancve
debiancve
CVE-2023-24056
2023-01-22 04:15:11
cvelist
cvelist
CVE-2023-24056
2023-01-22 00:00:00
wolfi
wolfi
CVE-2023-24056 vulnerabilities
2024-06-26 09:08:30
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.0005 Low
EPSS
Percentile
18.4%
Related for RH:CVE-2023-24056