CVE-2023-22652lowCWE-120

CVE-2023-22652: low-severity vulnerability in openSUSE libeconf

Stack buffer overflow in "read_file" function

Published · Updated

Follow this CVE+ Monitor libeconf+ Monitor libeconf

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.3epss 0.6%
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
openSUSE · libeconf
Related CVEs — openSUSE libeconf

In the same product, most dangerous first.

CVE-2023-32181LOWStack buffer overflow in "econf_writeFile" functionEPSS 0.6%