MiracleLinux 9 : libeconf-0.4.1-3.el9 (AXSA:2023-6286:01)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6286:01 advisory. libeconf: stack-based buffer overflow in readfile in lib/getfilecontents.c CVE-2023-22652 Tenable has extracted the preceding description block directly from...

Debian dla-4164 : libeconf-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4164 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4164-1 [email protected] https://www.debian.org/lts/security/...

Linux Distros Unpatched Vulnerability : CVE-2023-22652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue...

Fedora: Security Advisory (FEDORA-2023-52b5309835)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : libeconf (2023-52b5309835)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-52b5309835 advisory. Automatic update for libeconf-0.5.2-1.fc40. Changelog Mon Aug 28 2023 Iker Pedrosa - 0.5.2-1 - Update to 0.5.2 RH1980774 - Fix CVE-2023-22652...

CentOS 9 : libeconf-0.4.1-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libeconf-0.4.1-3.el9 build changelog. - A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf leads to DoS via malformed config files...

Fedora 39 : libeconf (2023-86b710bb4f)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-86b710bb4f advisory. Rebase to 0.5.2 to fix CVE-2023-22652 and CVE-2023-30079 Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 37 : libeconf (2023-b4b77f950c)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-b4b77f950c advisory. Rebase to 0.5.2 to fix CVE-2023-22652 and CVE-2023-30079 Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 38 : libeconf (2023-6432bb65ae)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-6432bb65ae advisory. Rebase to 0.5.2 to fix CVE-2023-22652 and CVE-2023-30079 Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2023-30079

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-22652. Reason: This record is a duplicate of CVE-2023-22652. Notes: All CVE users should reference CVE-2023-22652 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

CVE-2023-30079

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-22652. Reason: This record is a duplicate of CVE-2023-22652. Notes: All CVE users should reference CVE-2023-22652 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

AlmaLinux 9 : libeconf (ALSA-2023:4347)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2023:4347 advisory. - A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue...

Oracle Linux 9 : libeconf (ELSA-2023-4347)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-4347 advisory. 0.4.1-3 - Fix stack-based buffer overflow in readfile. Resolves: 2212467 CVE-2023-22652 Tenable has extracted the preceding description block directly from the...

Moderate: Red Hat Security Advisory: libeconf security update

An update for libeconf is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2023-22652

A flaw was found in the libeconf library. This issue occurs when parsing a specially crafted configuration file, causing a stack-based buffer overflow, resulting in a denial of service...

CVE-2023-22652

creationtimestamp| type| source ---|---|--- 2023-06-01 16:30:15+00:00| seen| https://t.me/cibsecurity/64848...

CVE-2023-22652

A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2...

CVE-2023-22652

A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2...

CVE-2023-22652

CVE-2023-22652 is a stack/ buffer overflow in libeconf’s read_file() (openSUSE libeconf) that can cause DoS via malformed configuration files. Affected versions are libeconf before 0.5.2. Public reports in multiple os/distributions confirm the issue and indicate a fix/update path: Fedora and othe...

CVE-2023-22652 Stack buffer overflow in "read_file" function

A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2...