VDB
BDU%3A2023-05907
BDU%3A2023-05907
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функции read_file() библиотеки для анализа и управления файлами конфигурации libeconf, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Red Hat Inc., Fedora Project, openSUSE Project | Debian GNU/Linux, Red Hat Enterprise Linux, Fedora, libeconf |
Timeline
- Sep 21, 2023 CVE Published
References
- https://github.com/openSUSE/libeconf/releases/tag/v0.5.2 advisory
- https://github.com/openSUSE/libeconf/commit/8d086dfc69d4299e55e4844e3573b3a4cf420f19 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SMG5256D5I3GFA3RBAJQ2WYPJDYAIL74/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAYW7X753Z6GOJKVLQPXBDHISN6ZT233/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SDD5GL5T3V5XZ3VFA4HPE6YGJ2K4HHPC/ url
- https://github.com/openSUSE/libeconf/issues/177 advisory
- https://github.com/yangjiageng/PoC/blob/master/libeconf-PoC/read_file_503 url
- https://security-tracker.debian.org/tracker/CVE-2023-30079 url
- https://raw.githubusercontent.com/yangjiageng/PoC/master/libeconf-PoC/tst-logindefs1.c url
- https://access.redhat.com/security/cve/CVE-2023-30079 url