CVE-2023-2603
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can...
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.8
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.
- Record
CVE-2023-2603- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
CVE List
7.8
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.
- Record
CVE-2023-2603- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
EUVDEUVD-2023-34077
7.8
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.
- Record
EUVD-2023-34077- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-wp54-pwvg-rqq5
7.8
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can...
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.
- Record
GHSA-wp54-pwvg-rqq5- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
OSVALPINE-CVE-2023-2603
7.8
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.
- Record
ALPINE-CVE-2023-2603- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVAZL-27065
7.8
CVE-2023-2603 affecting package libcap for versions less than 2.60-2
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.
- Record
AZL-27065- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 25 moreShow less
OSVBELL-CVE-2023-2603
7.8
CVE-2023-2603 does not affect BellSoft software
- Record
BELL-CVE-2023-2603- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
7.8
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.
- Record
CVE-2023-2603- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-2603
7.8
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.
- Record
DEBIAN-CVE-2023-2603- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2023-1342
4.4
libcap security update
This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.
Security Fix(es):
A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.(CVE-2023-2602)
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.(CVE-2023-2603)
- Record
OESA-2023-1342- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVOESA-2023-1343
4.4
libcap security update
This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.
Security Fix(es):
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.(CVE-2023-2603)
- Record
OESA-2023-1343- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVOESA-2023-1344
4.4
libcap security update
This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.
Security Fix(es):
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.(CVE-2023-2603)
- Record
OESA-2023-1344- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVOESA-2023-1345
4.4
libcap security update
This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.
Security Fix(es):
A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.(CVE-2023-2602)
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.(CVE-2023-2603)
- Record
OESA-2023-1345- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2023:4524
7.8
Red Hat Security Advisory: libcap security update
- Record
RHSA-2023:4524- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:5071
7.8
Red Hat Security Advisory: libcap security update
- Record
RHSA-2023:5071- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:7400
7.8
Red Hat Security Advisory: libcap security update
- Record
RHSA-2023:7400- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:0436
7.8
Red Hat Security Advisory: libcap security update
- Record
RHSA-2024:0436- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-2603
7.8
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.
- Record
UBUNTU-CVE-2023-2603- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2023:4524 No score
Moderate: libcap security update
Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.
Security Fix(es):
- libcap: Integer Overflow in _libcap_strdup() (CVE-2023-2603)
- libcap: Memory Leak on pthread_create() Error (CVE-2023-2602)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:4524- Updated
- 2026-11-02
OSVALSA-2023:5071 No score
Moderate: libcap security update
Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.
Security Fix(es):
- libcap: Integer Overflow in _libcap_strdup() (CVE-2023-2603)
- libcap: Memory Leak on pthread_create() Error (CVE-2023-2602)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:5071- Updated
- 2026-11-02
OSVCLSA-2023-1688677606 No score
Fix CVE(s): CVE-2023-2603
* SECURITY UPDATE: Integer overflow in _libcap_strdup()
- debian/patches/CVE-2023-2603.patch: enhance libcap's internal strdup
code to limit the processing of long strings
- CVE-2023-2603
- Record
CLSA-2023-1688677606- Updated
- 2026-11-02
OSVCLSA-2023-1688678245 No score
Fix CVE(s): CVE-2023-2603
* SECURITY UPDATE: Integer overflow in _libcap_strdup()
- debian/patches/CVE-2023-2603.patch: enhance libcap's internal strdup
code to limit the processing of long strings
- CVE-2023-2603
- Record
CLSA-2023-1688678245- Updated
- 2026-11-02
OSVCLSA-2023-1699379448 No score
libcap: Fix of CVE-2023-2603
- CVE-2023-2603: integer overflow if the input string is close to 4GiB.
- Record
CLSA-2023-1699379448- Updated
- 2026-11-02
OSVMGASA-2023-0205 No score
Updated libcap packages fix security vulnerability
A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory. (CVE-2023-2602)
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB. (CVE-2023-2603)
- Record
MGASA-2023-0205- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12945-1 No score
libcap-devel-2.69-1.1 on GA media
These are all security issues fixed in the libcap-devel-2.69-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12945-1- Updated
- 2026-11-02
OSVRLSA-2023:4524 No score
Moderate: libcap security update
Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.
Security Fix(es):
-
libcap: Integer Overflow in _libcap_strdup() (CVE-2023-2603)
-
libcap: Memory Leak on pthread_create() Error (CVE-2023-2602)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2023:4524- Updated
- 2026-11-02
OSVSUSE-SU-2023:2764-1 No score
Security update for libcap
This update for libcap fixes the following issues:
- CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419).
- Record
SUSE-SU-2023:2764-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2765-1 No score
Security update for libcap
This update for libcap fixes the following issues:
- CVE-2023-2602: Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create() (bsc#1211418).
- CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419).
- Record
SUSE-SU-2023:2765-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2956-1 No score
Security update for libcap
This update for libcap fixes the following issues:
- CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419).
- Record
SUSE-SU-2023:2956-1- Updated
- 2026-11-02
OSVUSN-6166-1 No score
libcap2 vulnerabilities
David Gstir discovered that libcap2 incorrectly handled certain return codes. An attacker could possibly use this issue to cause libcap2 to consume memory, leading to a denial of service. (CVE-2023-2602)
Richard Weinberger discovered that libcap2 incorrectly handled certain long input strings. An attacker could use this issue to cause libcap2 to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-2603)
- Record
USN-6166-1- Updated
- 2026-11-02
OSVUSN-6166-2 No score
libcap2 vulnerability
USN-6166-1 fixed a vulnerability in libcap2. This update provides the corresponding update for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM.
Original advisory details:
Richard Weinberger discovered that libcap2 incorrectly handled certain long input strings. An attacker could use this issue to cause libcap2 to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-2603)
- Record
USN-6166-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libcapAlpine:v3.15 |
before 2.61-r1 | 2.61-r1 |
libcapAlpine:v3.16 |
before 2.64-r1 | 2.64-r1 |
libcapAlpine:v3.17 |
before 2.66-r1 | 2.66-r1 |
libcapAlmaLinux:8 From an advisory covering 2 CVEs |
before 2.48-5.el8_8 | 2.48-5.el8_8 |
libcap-develAlmaLinux:8 From an advisory covering 2 CVEs |
before 2.48-5.el8_8 | 2.48-5.el8_8 |
libcapAlmaLinux:9 From an advisory covering 2 CVEs |
before 2.48-9.el9_2 | 2.48-9.el9_2 |
libcap-develAlmaLinux:9 From an advisory covering 2 CVEs |
before 2.48-9.el9_2 | 2.48-9.el9_2 |
libcapAzure Linux:2 |
before 2.60-2 | 2.60-2 |
libcap-devTuxCare:Ubuntu:16.04 |
before 1:2.24-12+tuxcare.els1 | 1:2.24-12+tuxcare.els1 |
libcap2TuxCare:Ubuntu:16.04 |
before 1:2.24-12+tuxcare.els1 | 1:2.24-12+tuxcare.els1 |
Show 61 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libcap2-binTuxCare:Ubuntu:16.04 |
before 1:2.24-12+tuxcare.els1 | 1:2.24-12+tuxcare.els1 |
libpam-capTuxCare:Ubuntu:16.04 |
before 1:2.24-12+tuxcare.els1 | 1:2.24-12+tuxcare.els1 |
libcap-devTuxCare:Ubuntu:18.04 |
before 1:2.25-1.2+tuxcare.els1 | 1:2.25-1.2+tuxcare.els1 |
libcap2TuxCare:Ubuntu:18.04 |
before 1:2.25-1.2+tuxcare.els1 | 1:2.25-1.2+tuxcare.els1 |
libcap2-binTuxCare:Ubuntu:18.04 |
before 1:2.25-1.2+tuxcare.els1 | 1:2.25-1.2+tuxcare.els1 |
libpam-capTuxCare:Ubuntu:18.04 |
before 1:2.25-1.2+tuxcare.els1 | 1:2.25-1.2+tuxcare.els1 |
libcapTuxCare:CentOS:7 |
before 2.22-11.el7.tuxcare.els1 | 2.22-11.el7.tuxcare.els1 |
libcap-develTuxCare:CentOS:7 |
before 2.22-11.el7.tuxcare.els1 | 2.22-11.el7.tuxcare.els1 |
libcap2Debian:12 |
before 1:2.66-4 | 1:2.66-4 |
libcap2Debian:13 |
before 1:2.66-4 | 1:2.66-4 |
libcap2Debian:14 |
before 1:2.66-4 | 1:2.66-4 |
libcap2Debian:11 From an advisory covering 3 CVEs |
before 1:2.44-1+deb11u1, plus listed versions 1:2.44-1 |
1:2.44-1+deb11u1 |
libcapMageia:8 From an advisory covering 2 CVEs |
before 2.46-1.1.mga8 | 2.46-1.1.mga8 |
libcapopenEuler:22.03-LTS-SP1 From an advisory covering 2 CVEs |
before 2.61-5.oe2203sp1 | 2.61-5.oe2203sp1 |
libcapopenEuler:20.03-LTS-SP1 |
before 2.32-6.oe1 | 2.32-6.oe1 |
libcapopenEuler:20.03-LTS-SP3 |
before 2.32-6.oe1 | 2.32-6.oe1 |
libcapopenEuler:22.03-LTS From an advisory covering 2 CVEs |
before 2.61-5.oe2203 | 2.61-5.oe2203 |
libcapRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:2.48-5.el8_8 | 0:2.48-5.el8_8 |
libcap-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:2.48-5.el8_8 | 0:2.48-5.el8_8 |
libcap-debugsourceRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:2.48-5.el8_8 | 0:2.48-5.el8_8 |
libcap-develRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:2.48-5.el8_8 | 0:2.48-5.el8_8 |
libcap-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:2.48-9.el9_2 | 0:2.48-9.el9_2 |
libcap-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:2.48-9.el9_2 | 0:2.48-9.el9_2 |
libcap-develRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:2.48-9.el9_2 | 0:2.48-9.el9_2 |
libcapRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 0:2.48-9.el9_2 | 0:2.48-9.el9_2 |
libcap-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 0:2.48-9.el9_2 | 0:2.48-9.el9_2 |
libcap-debugsourceRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 0:2.48-9.el9_2 | 0:2.48-9.el9_2 |
libcapRed Hat:rhel_eus:8.6::baseos From an advisory covering 2 CVEs |
before 0:2.48-4.el8_6 | 0:2.48-4.el8_6 |
libcap-debuginfoRed Hat:rhel_eus:8.6::baseos From an advisory covering 2 CVEs |
before 0:2.48-4.el8_6 | 0:2.48-4.el8_6 |
libcap-debugsourceRed Hat:rhel_eus:8.6::baseos From an advisory covering 2 CVEs |
before 0:2.48-4.el8_6 | 0:2.48-4.el8_6 |
libcap-develRed Hat:rhel_eus:8.6::baseos From an advisory covering 2 CVEs |
before 0:2.48-4.el8_6 | 0:2.48-4.el8_6 |
libcap-debuginfoRed Hat:rhel_eus:9.0::appstream |
before 0:2.48-8.el9_0.1 | 0:2.48-8.el9_0.1 |
libcap-debugsourceRed Hat:rhel_eus:9.0::appstream |
before 0:2.48-8.el9_0.1 | 0:2.48-8.el9_0.1 |
libcap-develRed Hat:rhel_eus:9.0::appstream |
before 0:2.48-8.el9_0.1 | 0:2.48-8.el9_0.1 |
libcapRed Hat:rhel_eus:9.0::baseos |
before 0:2.48-8.el9_0.1 | 0:2.48-8.el9_0.1 |
libcap-debuginfoRed Hat:rhel_eus:9.0::baseos |
before 0:2.48-8.el9_0.1 | 0:2.48-8.el9_0.1 |
libcap-debugsourceRed Hat:rhel_eus:9.0::baseos |
before 0:2.48-8.el9_0.1 | 0:2.48-8.el9_0.1 |
libcapRocky Linux:8 From an advisory covering 2 CVEs |
before 0:2.48-5.el8_8 | 0:2.48-5.el8_8 |
libcapSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 2.26-14.9.1 | 2.26-14.9.1 |
libcapSUSE:Linux Enterprise Server 12 SP5 |
before 2.26-14.9.1 | 2.26-14.9.1 |
libcapSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2.26-14.9.1 | 2.26-14.9.1 |
libcapSUSE:Linux Enterprise Micro 5.3 From an advisory covering 2 CVEs |
before 2.63-150400.3.3.1 | 2.63-150400.3.3.1 |
libcapSUSE:Linux Enterprise Micro 5.4 From an advisory covering 2 CVEs |
before 2.63-150400.3.3.1 | 2.63-150400.3.3.1 |
libcapSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 2 CVEs |
before 2.63-150400.3.3.1 | 2.63-150400.3.3.1 |
libcapSUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 2 CVEs |
before 2.63-150400.3.3.1 | 2.63-150400.3.3.1 |
libcapopenSUSE:Leap Micro 5.3 From an advisory covering 2 CVEs |
before 2.63-150400.3.3.1 | 2.63-150400.3.3.1 |
libcapopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2.63-150400.3.3.1 | 2.63-150400.3.3.1 |
libcapopenSUSE:Leap 15.5 From an advisory covering 2 CVEs |
before 2.63-150400.3.3.1 | 2.63-150400.3.3.1 |
libcapSUSE:Linux Enterprise Real Time 15 SP3 |
before 2.26-150000.4.9.1 | 2.26-150000.4.9.1 |
libcapSUSE:Manager Proxy 4.2 |
before 2.26-150000.4.9.1 | 2.26-150000.4.9.1 |
libcapSUSE:Manager Server 4.2 |
before 2.26-150000.4.9.1 | 2.26-150000.4.9.1 |
libcapSUSE:Linux Enterprise Micro 5.1 |
before 2.26-150000.4.9.1 | 2.26-150000.4.9.1 |
libcapSUSE:Linux Enterprise Micro 5.2 |
before 2.26-150000.4.9.1 | 2.26-150000.4.9.1 |
libcapopenSUSE:Leap 15.4 |
before 2.26-150000.4.9.1 | 2.26-150000.4.9.1 |
libcap2Ubuntu:Pro:14.04:LTS |
before 1:2.24-0ubuntu2+esm1, plus listed versions 1:2.22-1.2ubuntu21:2.24-0ubuntu11:2.24-0ubuntu2 |
1:2.24-0ubuntu2+esm1 |
libcap2Ubuntu:Pro:16.04:LTS |
before 1:2.24-12ubuntu0.1~esm1, plus listed versions 1:2.24-91:2.24-12 |
1:2.24-12ubuntu0.1~esm1 |
libcap2Ubuntu:Pro:18.04:LTS |
before 1:2.25-1.2ubuntu0.1~esm1, plus listed versions 1:2.25-1.11:2.25-1.2 |
1:2.25-1.2ubuntu0.1~esm1 |
libcap2Ubuntu:20.04:LTS |
before 1:2.32-1ubuntu0.1, plus listed versions 1:2.25-21:2.27-11:2.32-1 |
1:2.32-1ubuntu0.1 |
libcap2Ubuntu:22.04:LTS |
before 1:2.44-1ubuntu0.22.04.1, plus listed versions 1:2.44-1build11:2.44-1build21:2.44-1build3 |
1:2.44-1ubuntu0.22.04.1 |
libcap2Ubuntu:20.04:LTS From an advisory covering 2 CVEs |
before 1:2.32-1ubuntu0.1, plus listed versions 1:2.25-21:2.27-11:2.32-1 |
1:2.32-1ubuntu0.1 |
libcap2Ubuntu:22.04:LTS From an advisory covering 2 CVEs |
before 1:2.44-1ubuntu0.22.04.1, plus listed versions 1:2.44-1build11:2.44-1build21:2.44-1build3 |
1:2.44-1ubuntu0.22.04.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | Pazhanivelmani/external_libcap-Android10_r33_CVE-2023-2603 | 2024-11-12 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-2603 is a high vulnerability (CVSS 7.8) in Libcap Project Libcap, published May 15, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.58%, the 47th percentile. Fixed in libcap 2.61-r1.
References
x41-dsec.de/static/reports/X41-libcap-Code-Review-2023-OSTIF-Final-Report.pdf
bugzilla.redhat.com/show_bug.cgi?id=2209113
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPEGCFMCN5KGCFX5Y2VTKR732TTD4ADW
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ57ICDLMVYEREXQGZWL4GWI7FRJCRQT
nvd.nist.gov/vuln/detail/CVE-2023-2603
github.com/advisories/GHSA-wp54-pwvg-rqq5
Show 46 moreShow less
security.alpinelinux.org/vuln/CVE-2023-2603
access.redhat.com/errata/RHSA-2023:4524
access.redhat.com/security/cve/CVE-2023-2602
access.redhat.com/security/cve/CVE-2023-2603
bugzilla.redhat.com/2209113
bugzilla.redhat.com/2209114
errata.almalinux.org/8/ALSA-2023-4524.html
access.redhat.com/errata/RHSA-2023:5071
errata.almalinux.org/9/ALSA-2023-5071.html
docs.bell-sw.com/security/cves/CVE-2023-2603
errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1688677606
errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1688678245
errata.cloudlinux.com/centos7-els/CLSA-2023-1699379448.html
security-tracker.debian.org/tracker/CVE-2023-2603
advisories.mageia.org/MGASA-2023-0205.html
bugs.mageia.org/show_bug.cgi?id=31938
openwall.com/lists/oss-security/2023/05/15/4
sites.google.com/site/fullycapable/release-notes-for-libcap
openwall.com/lists/oss-security/2023/05/16/2
ubuntu.com/security/notices/USN-6166-1
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1342
nvd.nist.gov/vuln/detail/CVE-2023-2602
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1343
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1344
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1345
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2209114
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4524.json
cve.org/CVERecord?id=CVE-2023-2602
cve.org/CVERecord?id=CVE-2023-2603
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5071.json
access.redhat.com/errata/RHSA-2023:7400
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7400.json
access.redhat.com/errata/RHSA-2024:0436
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0436.json
errata.rockylinux.org/RLSA-2023:4524
suse.com/support/update/announcement/2023/suse-su-20232764-1
bugzilla.suse.com/1211419
suse.com/security/cve/CVE-2023-2603
suse.com/support/update/announcement/2023/suse-su-20232765-1
bugzilla.suse.com/1211418
suse.com/security/cve/CVE-2023-2602
suse.com/support/update/announcement/2023/suse-su-20232956-1
ubuntu.com/security/CVE-2023-2603
ubuntu.com/security/notices/USN-6166-2
ubuntu.com/security/CVE-2023-2602