CVE-2023-32181: Stack buffer overflow in "econf_writeFile" function
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
libeconfto a version that resolves this vulnerability.Fixed in 0.5.2
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-32181.
What is the severity of CVE-2023-32181?
The severity of CVE-2023-32181 is medium (6.5).
Which software is affected by this vulnerability?
The openSUSE libeconf software version up to and excluding 0.5.2 is affected by this vulnerability.
How does this vulnerability manifest?
This vulnerability allows for a Denial-of-Service (DoS) attack through malformed configuration files.
Where can I find more information about CVE-2023-32181?
You can find more information about CVE-2023-32181 at the following references: (1) https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32181, (2) https://github.com/openSUSE/libeconf/issues/178