CVE-2023-39976 - Vulnerability Details

Vendors	Products
Clusterlabs	Libqb
Redhat	Enterprise Linux Rhel Eus

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 9
libqb-0:2.0.6-4.el9_3	cpe:/a:redhat:enterprise_linux:9	RHSA-2023:6578	2023-11-07T00:00:00Z
Red Hat Enterprise Linux 9.0 Extended Update Support
libqb-0:2.0.3-12.el9_0	cpe:/a:redhat:rhel_eus:9.0	RHSA-2023:5597	2023-10-10T00:00:00Z
Red Hat Enterprise Linux 9.2 Extended Update Support
libqb-0:2.0.6-3.el9_2	cpe:/a:redhat:rhel_eus:9.2	RHSA-2023:7376	2023-11-21T00:00:00Z

Link	Providers
https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8
https://github.com/ClusterLabs/libqb/compare/v2.0.7...v2.0.8
https://github.com/ClusterLabs/libqb/pull/490
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH/
https://nvd.nist.gov/vuln/detail/CVE-2023-39976
https://www.cve.org/CVERecord?id=CVE-2023-39976

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-39976", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-10-15T17:56:46.579Z", "dateReserved": "2023-08-08T00:00:00", "datePublished": "2023-08-08T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-08-24T02:06:20.795464"}, "descriptions": [{"lang": "en", "value": "log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/ClusterLabs/libqb/pull/490"}, {"url": "https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8"}, {"url": "https://github.com/ClusterLabs/libqb/compare/v2.0.7...v2.0.8"}, {"name": "FEDORA-2023-5a717dd33d", "tags": ["vendor-advisory"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH/"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T18:18:10.207Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/ClusterLabs/libqb/pull/490", "tags": ["x_transferred"]}, {"url": "https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8", "tags": ["x_transferred"]}, {"url": "https://github.com/ClusterLabs/libqb/compare/v2.0.7...v2.0.8", "tags": ["x_transferred"]}, {"name": "FEDORA-2023-5a717dd33d", "tags": ["vendor-advisory", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH/"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-15T17:56:38.433214Z", "id": "CVE-2023-39976", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-15T17:56:46.579Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2023-39976 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

dateUpdated : 2024-10-15T17:56:46.579Z (string)

dateReserved : 2023-08-08T00:00:00 (string)

datePublished : 2023-08-08T00:00:00 (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2023-08-24T02:06:20.795464 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered. (string)

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

version : n/a (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://github.com/ClusterLabs/libqb/pull/490 (string)

}

1 : { »

url : https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8 (string)

}

2 : { »

url : https://github.com/ClusterLabs/libqb/compare/v2.0.7...v2.0.8 (string)

}

3 : { »

name : FEDORA-2023-5a717dd33d (string)

tags : [ »

0 : vendor-advisory (string)

]

url : https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH/ (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : n/a (string)

}

]

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T18:18:10.207Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://github.com/ClusterLabs/libqb/pull/490 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8 (string)

tags : [ »

0 : x_transferred (string)

]

}

2 : { »

url : https://github.com/ClusterLabs/libqb/compare/v2.0.7...v2.0.8 (string)

tags : [ »

0 : x_transferred (string)

]

}

3 : { »

name : FEDORA-2023-5a717dd33d (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_transferred (string)

]

url : https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH/ (string)

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-10-15T17:56:38.433214Z (string)

id : CVE-2023-39976 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-15T17:56:46.579Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/ClusterLabs/libqb/pull/490", "tags": ["x_transferred"]}, {"url": "https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8", "tags": ["x_transferred"]}, {"url": "https://github.com/ClusterLabs/libqb/compare/v2.0.7...v2.0.8", "tags": ["x_transferred"]}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH/", "name": "FEDORA-2023-5a717dd33d", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T18:18:10.207Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-39976", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-10-15T17:56:38.433214Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-15T17:56:42.713Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://github.com/ClusterLabs/libqb/pull/490"}, {"url": "https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8"}, {"url": "https://github.com/ClusterLabs/libqb/compare/v2.0.7...v2.0.8"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH/", "name": "FEDORA-2023-5a717dd33d", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-08-24T02:06:20.795464"}}}, "cveMetadata": {"cveId": "CVE-2023-39976", "state": "PUBLISHED", "dateUpdated": "2024-10-15T17:56:46.579Z", "dateReserved": "2023-08-08T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2023-08-08T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://github.com/ClusterLabs/libqb/pull/490 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8 (string)

tags : [ »

0 : x_transferred (string)

]

}

2 : { »

url : https://github.com/ClusterLabs/libqb/compare/v2.0.7...v2.0.8 (string)

tags : [ »

0 : x_transferred (string)

]

}

3 : { »

url : https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH/ (string)

name : FEDORA-2023-5a717dd33d (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T18:18:10.207Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-39976 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-10-15T17:56:38.433214Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-15T17:56:42.713Z (string)

}

]

cna : { »

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

references : [ »

0 : { »

url : https://github.com/ClusterLabs/libqb/pull/490 (string)

}

1 : { »

url : https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8 (string)

}

2 : { »

url : https://github.com/ClusterLabs/libqb/compare/v2.0.7...v2.0.8 (string)

}

3 : { »

url : https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH/ (string)

name : FEDORA-2023-5a717dd33d (string)

tags : [ »

0 : vendor-advisory (string)

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : text (string)

description : n/a (string)

}

]

}

]

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2023-08-24T02:06:20.795464 (string)

}

cveMetadata : { »

cveId : CVE-2023-39976 (string)

state : PUBLISHED (string)

dateUpdated : 2024-10-15T17:56:46.579Z (string)

dateReserved : 2023-08-08T00:00:00 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

datePublished : 2023-08-08T00:00:00 (string)

assignerShortName : mitre (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:clusterlabs:libqb:*:*:*:*:*:*:*:*", "matchCriteriaId": "6356D585-67AB-4E61-9DCB-50DD9662CED3", "versionEndExcluding": "2.0.8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered."}], "id": "CVE-2023-39976", "lastModified": "2024-11-21T08:16:09.810", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-08-08T06:15:46.590", "references": [{"source": "cve@mitre.org", "tags": ["Patch"], "url": "https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8"}, {"source": "cve@mitre.org", "tags": ["Not Applicable"], "url": "https://github.com/ClusterLabs/libqb/compare/v2.0.7...v2.0.8"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "https://github.com/ClusterLabs/libqb/pull/490"}, {"source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "https://github.com/ClusterLabs/libqb/compare/v2.0.7...v2.0.8"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/ClusterLabs/libqb/pull/490"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-120"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:clusterlabs:libqb:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 6356D585-67AB-4E61-9DCB-50DD9662CED3 (string)

versionEndExcluding : 2.0.8 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered. (string)

}

]

id : CVE-2023-39976 (string)

lastModified : 2024-11-21T08:16:09.810 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-08-08T06:15:46.590 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Patch (string)

]

url : https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8 (string)

}

1 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Not Applicable (string)

]

url : https://github.com/ClusterLabs/libqb/compare/v2.0.7...v2.0.8 (string)

}

2 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Patch (string)

]

url : https://github.com/ClusterLabs/libqb/pull/490 (string)

}

3 : { »

source : cve@mitre.org (string)

url : https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH/ (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8 (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Not Applicable (string)

]

url : https://github.com/ClusterLabs/libqb/compare/v2.0.7...v2.0.8 (string)

}

6 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://github.com/ClusterLabs/libqb/pull/490 (string)

}

7 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH/ (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-120 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Show plain JSON

{"affected_release": [{"advisory": "RHSA-2023:6578", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "libqb-0:2.0.6-4.el9_3", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2023-11-07T00:00:00Z"}, {"advisory": "RHSA-2023:5597", "cpe": "cpe:/a:redhat:rhel_eus:9.0", "package": "libqb-0:2.0.3-12.el9_0", "product_name": "Red Hat Enterprise Linux 9.0 Extended Update Support", "release_date": "2023-10-10T00:00:00Z"}, {"advisory": "RHSA-2023:7376", "cpe": "cpe:/a:redhat:rhel_eus:9.2", "package": "libqb-0:2.0.6-3.el9_2", "product_name": "Red Hat Enterprise Linux 9.2 Extended Update Support", "release_date": "2023-11-21T00:00:00Z"}], "bugzilla": {"description": "libqb: Buffer overflow in log_blackbox.c", "id": "2230708", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2230708"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.2", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "status": "verified"}, "cwe": "CWE-119", "details": ["log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered."], "name": "CVE-2023-39976", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "libqb", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "libqb", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "libqb", "product_name": "Red Hat Enterprise Linux 8"}], "public_date": "2023-08-08T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2023-39976\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-39976"], "threat_severity": "Moderate"}

{

affected_release : [ »

0 : { »

advisory : RHSA-2023:6578 (string)

cpe : cpe:/a:redhat:enterprise_linux:9 (string)

package : libqb-0:2.0.6-4.el9_3 (string)

product_name : Red Hat Enterprise Linux 9 (string)

release_date : 2023-11-07T00:00:00Z (string)

}

1 : { »

advisory : RHSA-2023:5597 (string)

cpe : cpe:/a:redhat:rhel_eus:9.0 (string)

package : libqb-0:2.0.3-12.el9_0 (string)

product_name : Red Hat Enterprise Linux 9.0 Extended Update Support (string)

release_date : 2023-10-10T00:00:00Z (string)

}

2 : { »

advisory : RHSA-2023:7376 (string)

cpe : cpe:/a:redhat:rhel_eus:9.2 (string)

package : libqb-0:2.0.6-3.el9_2 (string)

product_name : Red Hat Enterprise Linux 9.2 Extended Update Support (string)

release_date : 2023-11-21T00:00:00Z (string)

}

]

bugzilla : { »

description : libqb: Buffer overflow in log_blackbox.c (string)

id : 2230708 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2230708 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 7.2 (string)

cvss3_scoring_vector : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

status : verified (string)

}

cwe : CWE-119 (string)

details : [ »

0 : log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered. (string)

]

name : CVE-2023-39976 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Out of support scope (string)

package_name : libqb (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Out of support scope (string)

package_name : libqb (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

2 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Not affected (string)

package_name : libqb (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

]

public_date : 2023-08-08T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2023-39976 https://nvd.nist.gov/vuln/detail/CVE-2023-39976 (string)

]

threat_severity : Moderate (string)

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable yes

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable yes

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object