USN-6423-2
libcue vulnerability
USN-6423-1 fixed a vulnerability in CUE. This update provides the corresponding updates for Ubuntu 23.10.
Original advisory details:
It was discovered that CUE incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive information or execute arbitrary code.
What each source reports
OSV No score
libcue vulnerability
USN-6423-1 fixed a vulnerability in CUE. This update provides the corresponding updates for Ubuntu 23.10.
Original advisory details:
It was discovered that CUE incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive information or execute arbitrary code.
- Record
USN-6423-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libcueUbuntu:23.10 |
before 2.2.1-4ubuntu1, plus listed versions 2.2.1-4 |
2.2.1-4ubuntu1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-6423-2 is a vulnerability with no CVSS score yet in libcue, published October 17, 2023. No source lists public exploit code. Fixed in libcue 2.2.1-4ubuntu1.