VDB
BDU%3A2024-01535
BDU%3A2024-01535
PUBLISHED
CVSS 10 CRITICAL
Уязвимость компонента log_blackbox.c библиотеки libqb, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Novell Inc., Сообщество свободного программного обеспечения, ООО «РусБИТех-Астра», Canonical Ltd., Fedora Project, Oracle Corp., АО «ИВК», IBM Corp., ClusterLabs | Red Hat Enterprise Linux, OpenSUSE Leap, Debian GNU/Linux, openSUSE Tumbleweed, SUSE Linux Enterprise High Availability Extension, Astra Linux Special Edition (запись в едином реестре российских программ №369), Suse Linux Enterprise Server, Suse Linux Enterprise Desktop, SUSE Linux Enterprise Server for SAP Applications, Ubuntu, SUSE Manager Retail Branch Server, SUSE Manager Proxy, SUSE Manager Server, SUSE Linux Enterprise High Performance Computing, SUSE Linux Enterprise Module for Basesystem, Fedora, Oracle Linux, АЛЬТ СП 10, IBM DB2, SUSE Liberty Linux, libqb, IBM Application Performance Management, IBM Security Verify Governance, Storage Protect Server |
Timeline
- Feb 25, 2024 CVE Published
- May 5, 2025 CVE Updated
- Mar 19, 2026 Distribution Patch
References
- https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8 url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH/ url
- https://security-tracker.debian.org/tracker/CVE-2023-39976 url
- https://ubuntu.com/security/notices/USN-6308-1 url
- https://www.oracle.com/security-alerts/linuxbulletinoct2023.html url
- https://altsp.su/obnovleniya-bezopasnosti/ url
- https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE161 url
- https://github.com/ClusterLabs/libqb/pull/490 advisory
- https://access.redhat.com/security/cve/CVE-2023-39976 advisory
- https://www.suse.com/security/cve/CVE-2023-39976.html advisory
- https://www.ibm.com/support/pages/security-bulletin-vulnerability-libqb-affects-ibm%C2%AE-db2%C2%AE-high-availability-deployments-using-pacemaker-cve-2023-39976 advisory
- https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 advisory
- https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE47 advisory