Debian dla-4637 : libconfig-inifiles-perl - security update

The remote Debian 11 / 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4637 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4637-1 [email protected]...

Debian dsa-6354 : libconfig-inifiles-perl - security update

The remote Debian 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6354 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6354-1 [email protected] https://www.debian.org/security/...

[SECURITY] [DLA 4637-1] libconfig-inifiles-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4637-1 [email protected] https://www.debian.org/lts/security/ Salvatore Bonaccorso June 19, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 6354-1] libconfig-inifiles-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6354-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 19, 2026 https://www.debian.org/security/faq -...

libconfig:config_read_fuzzer: Stack-buffer-overflow in fuzz_data_path

Project: https://github.com/hyperrealm/libconfig.git Detailed Report: https://oss-fuzz.com/testcase?key=5566875317895168 Project: libconfig Fuzzing Engine: libFuzzer Fuzz Target: configreadfuzzer Job Type: libfuzzerasanlibconfig Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...

libconfig:config_read_fuzzer: Heap-buffer-overflow in fuzz_data_path

Detailed Report: https://oss-fuzz.com/testcase?key=5828256958054400 Project: libconfig Fuzzing Engine: libFuzzer Fuzz Target: configreadfuzzer Job Type: libfuzzerasanlibconfig Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x521000003900 Crash State: fuzzdatapath...

libconfig:config_read_fuzzer: Heap-buffer-overflow in LLVMFuzzerCustomMutator

Detailed Report: https://oss-fuzz.com/testcase?key=5194040679399424 Project: libconfig Fuzzing Engine: libFuzzer Fuzz Target: configreadfuzzer Job Type: libfuzzerasanlibconfig Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x52100000c500 Crash State:...

libconfig:config_read_fuzzer: Stack-buffer-overflow in fuzz_data_path

Project: https://github.com/hyperrealm/libconfig.git Detailed Report: https://oss-fuzz.com/testcase?key=6238197170634752 Project: libconfig Fuzzing Engine: afl Fuzz Target: configreadfuzzer Job Type: aflasanlibconfig Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

libconfig:config_read_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=5276773562777600 Project: libconfig Fuzzing Engine: libFuzzer Fuzz Target: configreadfuzzer Job Type: libfuzzerubsanlibconfig Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace...

libconfig:config_read_fuzzer: Stack-buffer-overflow in libconfig_yy_scan_string

Project: https://github.com/hyperrealm/libconfig.git Detailed Report: https://oss-fuzz.com/testcase?key=5741805715128320 Project: libconfig Fuzzing Engine: libFuzzer Fuzz Target: configreadfuzzer Job Type: libfuzzerasanlibconfig Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash...

libconfig:config_read_fuzzer: Stack-buffer-overflow in config_setting_get_member

Project: https://github.com/hyperrealm/libconfig.git Detailed Report: https://oss-fuzz.com/testcase?key=6621525259649024 Project: libconfig Fuzzing Engine: libFuzzer Fuzz Target: configreadfuzzer Job Type: libfuzzerasanlibconfig Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash...

libconfig:config_read_fuzzer: Crash in fuzz_data_path

Project: https://github.com/hyperrealm/libconfig.git Detailed Report: https://oss-fuzz.com/testcase?key=4713276390309888 Project: libconfig Fuzzing Engine: honggfuzz Fuzz Target: configreadfuzzer Job Type: honggfuzzasanlibconfig Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

new packages: libconfig

An update is available for libconfig. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...

libconfig.so Stack Buffer Overflow

The vulnerability of the configset function in the libconfig.so library, a built-in software library for web servers, is related to buffer overflows in the stack due to insufficient input handling. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary...

Applicative Protocol Multiplexer: SSLH

sslh accepts connections on specified ports, and forwards them further based on tests performed on the first data packet sent by the remote client. Probes for HTTP, SSL, SSH, OpenVPN, tinc, XMPP are implemented, and any other protocol that can be tested using a regular expression, can be...

CVE-2017-0373

The genclasspod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model aka libconfig-model-perl before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file...

CVE-2017-0374

lib/Config/Model.pm in Config-Model aka libconfig-model-perl before 2.102 allows local users to gain privileges via a crafted model in the current working directory, related to use of . with the INC array...

CVE-2017-0373

The genclasspod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model aka libconfig-model-perl before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file...

CVE-2017-0374

Affected software/component: libconfig-model-perl (Config-Model) – the file lib/Config/Model.pm. Vulnerability: in versions before 2.102, a crafted model in the current working directory can cause local privilege elevation via the INC path mechanism (use of “.” with INC). Impact: local users can ...

CVE-2017-0373

The genclasspod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model aka libconfig-model-perl before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file...