CVE-2023-32181

Stack buffer overflow in "econf_writeFile" function

3.3 LowFix available

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: Low

Exploit likelihood

0.57%Up 0.5 points since Jun 2, 2023

What each source reports

CVE List Score used 3.3

Stack buffer overflow in "econf_writeFile" function

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2.

Record: CVE-2023-32181
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness: CWE-120
Updated: 2026-11-02

EUVDEUVD-2023-36449 3.3

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2.

Record: EUVD-2023-36449
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated: 2026-11-03

GitHub AdvisoriesGHSA-wjxc-pgfj-hwrc 3.3

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in...

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2.

Record: GHSA-wjxc-pgfj-hwrc
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness: CWE-120
Updated: 2026-11-02

NVD 3.3

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2.

Record: CVE-2023-32181
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-120
Updated: 2026-11-02

OSVBELL-CVE-2023-32181 6.5

Record: BELL-CVE-2023-32181
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 3.3

Stack buffer overflow in "econf_writeFile" function

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2.

Record: CVE-2023-32181
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness: CWE-120
Updated: 2026-11-02

Show 6 moreShow less

OSVDEBIAN-CVE-2023-32181 6.5

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2.

Record: DEBIAN-CVE-2023-32181
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-32181 3.3

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2.

Record: UBUNTU-CVE-2023-32181
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVSUSE-SU-2023:3639-1 No score

Security update for libeconf

This update for libeconf fixes the following issues:

Update to version 0.5.2.

CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078).
CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'read_file' function. (bsc#1211078)

The following non-security bug was fixed:

Fixed parsing files correctly which have space characters AND none space characters as delimiters (bsc#1198165).

Record: SUSE-SU-2023:3639-1
Updated: 2026-11-02

OSVSUSE-SU-2023:3954-1 No score

Security update for libeconf

This update for libeconf fixes the following issues:

Update to version 0.5.2.

CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078).
CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'read_file' function. (bsc#1211078)

Record: SUSE-SU-2023:3954-1
Updated: 2026-11-02

OSVSUSE-SU-2023:3954-2 No score

Security update for libeconf

This update for libeconf fixes the following issues:

Update to version 0.5.2.

CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078).
CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'read_file' function. (bsc#1211078)

Record: SUSE-SU-2023:3954-2
Updated: 2026-11-02

OSVSUSE-SU-2024:2426-1 No score

Security update for libeconf

This update for libeconf fixes the following issues:

Update to version 0.5.2.

CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078).
CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'read_file' function. (bsc#1211078)

Record: SUSE-SU-2024:2426-1
Updated: 2026-11-02

Affected products

opensuse libeconf

Affected packages

Affected packages
Package	Affected	Fixed
`libeconf` Alpaquita:23	0.4.7-r0 up to 0.4.7-r1	0.4.7-r1
`libeconf` Alpaquita:stream	0.4.7-r0 up to 0.5.2-r1	0.5.2-r1
`libeconf` Debian:12	before 0.5.1+dfsg1-1+deb12u1, plus listed versions 0.5.1+dfsg1-1	0.5.1+dfsg1-1+deb12u1
`libeconf` Debian:13	before 0.5.2+dfsg1-1	0.5.2+dfsg1-1
`libeconf` Debian:14	before 0.5.2+dfsg1-1	0.5.2+dfsg1-1
`libeconf` SUSE:Manager Proxy 4.2 From an advisory covering 4 CVEs	before 0.5.2-150300.3.11.1	0.5.2-150300.3.11.1
`libeconf` SUSE:Manager Server 4.2 From an advisory covering 4 CVEs	before 0.5.2-150300.3.11.1	0.5.2-150300.3.11.1
`libeconf` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 4 CVEs	before 0.5.2-150300.3.11.1	0.5.2-150300.3.11.1
`libeconf` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 4 CVEs	before 0.5.2-150300.3.11.1	0.5.2-150300.3.11.1
`libeconf` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 4 CVEs	before 0.5.2-150400.3.6.1	0.5.2-150400.3.6.1

Show 11 moreShow less

Affected packages
Package	Affected	Fixed
`libeconf` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 4 CVEs	before 0.5.2-150400.3.6.1	0.5.2-150400.3.6.1
`libeconf` SUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 4 CVEs	before 0.5.2-150400.3.6.1	0.5.2-150400.3.6.1
`libeconf` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 4 CVEs	before 0.5.2-150400.3.6.1	0.5.2-150400.3.6.1
`libeconf` openSUSE:Leap 15.4 From an advisory covering 4 CVEs	before 0.5.2-150400.3.6.1	0.5.2-150400.3.6.1
`libeconf` openSUSE:Leap 15.5 From an advisory covering 4 CVEs	before 0.5.2-150400.3.6.1	0.5.2-150400.3.6.1
`libeconf` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 4 CVEs	before 0.5.2-150400.3.6.1	0.5.2-150400.3.6.1
`libeconf` Ubuntu:22.04:LTS	All versions, plus listed versions 0.3.8-10.3.8-1+deb11u1build0.22.04.1	None known
`libeconf` Ubuntu:24.04:LTS	All versions, plus listed versions 0.5.2+dfsg1-10.6.0+dfsg1-10.6.1+dfsg1-1	None known
`libeconf` Ubuntu:25.10	All versions, plus listed versions 0.7.7+dfsg1-1	None known
`libeconf` Ubuntu:26.10	All versions, plus listed versions 0.7.7+dfsg1-1build10.8.3+dfsg1-10.8.4+dfsg1-1	None known
`libeconf` Ubuntu:26.04:LTS	All versions, plus listed versions 0.7.7+dfsg1-10.7.7+dfsg1-1build1	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases, published	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-32181 is a low vulnerability (CVSS 3.3) in Opensuse Libeconf, published June 1, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.57%, the 47th percentile. Fixed in libeconf 0.4.7-r1.

References

Show 15 moreShow less