openSUSE libeconf vulnerabilities

Latest openSUSE libeconf CVEs

Newest publication first

1. CVE-2023-22652 Stack buffer overflow in "read_file" function

   Published 2023-06-01

   Medium·CVSS 6.5 EPSS 0.64%

   A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.

2. CVE-2023-32181 Stack buffer overflow in "econf_writeFile" function

   Published 2023-06-01

   Medium·CVSS 6.5 EPSS 0.57%

   A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.