CVE-2023-22652

CVE-2023-22652 is a stack/ buffer overflow in libeconf’s read_file() (openSUSE libeconf) that can cause DoS via malformed configuration files. Affected versions are libeconf before 0.5.2. Public reports in multiple os/distributions confirm the issue and indicate a fix/update path: Fedora and othe...

CVE-2023-32181

CVE-2023-32181 is a buffer overflow vulnerability in openSUSE libeconf (affecting libeconf up to version 0.5.1). The issue is triggered by malformed configuration files that allow a DoS via improper input size handling in the library’s code path referenced as a stack-based overflow in econf_write...