{"id":"CVE-2023-22652","aliases":["ALSA-2023:4347","BELL-CVE-2023-22652","DEBIAN-CVE-2023-22652","DLA-4164-1","EUVD-2023-26782","GHSA-rgj6-mpw9-qm58","RHSA-2023:4347","RLSA-2023:4347","SUSE-SU-2023:3639-1","SUSE-SU-2023:3954-1","SUSE-SU-2023:3954-2","SUSE-SU-2024:2426-1","UBUNTU-CVE-2023-22652","USN-8368-1"],"status":"published","title":"Stack buffer overflow in \"read_file\" function","description":"A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files.\nThis issue affects libeconf: before 0.5.2.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00636,"percentile":0.50846,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2023-06-01T11:51:15Z","modified":"2026-10-29T11:31:28Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"libeconf","fixed_in":["0.4.1-3.el9_2"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"libeconf","fixed_in":["0.4.7-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libeconf","fixed_in":["0.5.1+dfsg1-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libeconf","fixed_in":["0.5.2+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libeconf","fixed_in":["0.5.2+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"libeconf","fixed_in":["0.3.8-1+deb11u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libeconf","fixed_in":["0.3.8-1+deb11u1build0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1-3.el9_2"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.4.7-r0"},{"fixed":"0.4.7-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.1+dfsg1-1+deb12u1"}]}],"versions":["0.5.1+dfsg1-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.8-1+deb11u1"}]}],"versions":["0.3.8-1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.1-3.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libeconf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.1-3.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libeconf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.1-3.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libeconf-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.1-3.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.1-3.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-150300.3.11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-150300.3.11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-150300.3.11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-150300.3.11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-150400.3.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-150400.3.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-150400.3.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-150400.3.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-150400.3.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-150400.3.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-150400.3.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-150400.3.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.8-1+deb11u1build0.22.04.1"}]}],"versions":["0.3.8-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libeconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.8-1+deb11u1build0.22.04.1"}]}],"versions":["0.3.8-1"]}],"products":[{"vendor":"opensuse","product":"libeconf"}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22652","tags":["x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://https://github.com/openSUSE/libeconf/issues/177","tags":["x_transferred","Broken Link","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SMG5256D5I3GFA3RBAJQ2WYPJDYAIL74/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SDD5GL5T3V5XZ3VFA4HPE6YGJ2K4HHPC/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAYW7X753Z6GOJKVLQPXBDHISN6ZT233/","tags":["x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00016.html","tags":["web"]},{"url":"https://github.com/openSUSE/libeconf/issues/177","tags":["exploit","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22652","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SDD5GL5T3V5XZ3VFA4HPE6YGJ2K4HHPC"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SMG5256D5I3GFA3RBAJQ2WYPJDYAIL74"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAYW7X753Z6GOJKVLQPXBDHISN6ZT233"},{"url":"https://github.com/advisories/GHSA-rgj6-mpw9-qm58"},{"url":"https://access.redhat.com/errata/RHSA-2023:4347","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22652","tags":["report"]},{"url":"https://bugzilla.redhat.com/2212463","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-4347.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-22652","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/22xxx/CVE-2023-22652.json","tags":["advisory"]},{"url":"https://github.com/openSUSE/libeconf","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-22652","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212463","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4347.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22652","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-30079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234595","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-30079","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-30079","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:4347","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233639-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1198165","tags":["report"]},{"url":"https://bugzilla.suse.com/1211078","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-30078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-30079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32181","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233954-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233954-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242426-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-22652","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8368-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-22652","title":"Stack buffer overflow in \"read_file\" function","description":"A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files.\nThis issue affects libeconf: before 0.5.2.","status":"published","published":"2023-06-01T11:51:15.111Z","modified":"2025-05-13T00:11:54.972Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:35:16.126506Z"}],"euvd":[{"id":"EUVD-2023-26782","description":"A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files.\nThis issue affects libeconf: before 0.5.2.","status":"published","published":"2023-06-01T11:51:15Z","modified":"2025-05-13T00:11:54Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T20:32:48.910403Z"}],"ghsa":[{"id":"GHSA-rgj6-mpw9-qm58","title":"A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in...","description":"A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files.\nThis issue affects libeconf: before 0.5.2.","status":"published","published":"2023-06-01T12:30:14Z","modified":"2025-05-13T03:31:13Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:02:14.75912Z"}],"nvd":[{"id":"CVE-2023-22652","description":"A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files.\nThis issue affects libeconf: before 0.5.2.","status":"published","published":"2023-06-01T12:15:09.557Z","modified":"2026-06-17T05:35:51.567Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:08:03.795015Z"}],"osv":[{"id":"BELL-CVE-2023-22652","status":"published","published":"2023-06-01T12:15:00Z","modified":"2026-01-26T09:33:10.597004Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-22652","title":"Stack buffer overflow in \"read_file\" function","description":"A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files.\nThis issue affects libeconf: before 0.5.2.","status":"published","published":"2023-06-01T11:51:15.111Z","modified":"2026-10-28T02:30:25.784030823Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:44:30.334753Z"},{"id":"DEBIAN-CVE-2023-22652","description":"A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.","status":"published","published":"2023-06-01T12:15:09.557Z","modified":"2026-10-26T18:00:29.067056098Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"RHSA-2023:4347","title":"Red Hat Security Advisory: libeconf security update","status":"published","published":"2024-09-16T12:12:51Z","modified":"2025-11-22T12:53:44Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RLSA-2023:4347","title":"Moderate: libeconf security update","description":"Libeconf is a highly flexible and configurable library to parse and manage key=value configuration files. It reads configuration file snippets from different directories and builds the final configuration file from it.\n\nSecurity Fix(es):\n\n* libeconf: stack-based buffer overflow in read_file() in lib/getfilecontents.c (CVE-2023-22652)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-10-06T23:10:28.251866Z","modified":"2026-02-05T12:00:00.778031Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2023-22652","description":"A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.","status":"published","published":"2023-06-01T12:15:00Z","modified":"2026-06-02T18:16:10.460824479Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:20.198616Z"},{"id":"ALSA-2023:4347","title":"Moderate: libeconf security update","description":"Libeconf is a highly flexible and configurable library to parse and manage key=value configuration files. It reads configuration file snippets from different directories and builds the final configuration file from it.\n\nSecurity Fix(es):\n\n* libeconf: stack-based buffer overflow in read_file() in lib/getfilecontents.c (CVE-2023-22652)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-08-01T00:00:00Z","modified":"2026-10-29T11:31:28.968520401Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"DLA-4164-1","title":"libeconf - security update","status":"published","published":"2025-05-12T00:00:00Z","modified":"2026-03-09T01:20:25.843841Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"SUSE-SU-2023:3639-1","title":"Security update for libeconf","description":"This update for libeconf fixes the following issues:\n\nUpdate to version 0.5.2.\n\n- CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078).\n- CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'read_file' function. (bsc#1211078)\n\nThe following non-security bug was fixed:\n\n- Fixed parsing files correctly which have space characters AND none space characters as delimiters (bsc#1198165).\n","status":"published","published":"2023-09-18T11:33:33Z","modified":"2026-02-04T03:44:19.245379Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3954-1","title":"Security update for libeconf","description":"This update for libeconf fixes the following issues:\n\nUpdate to version 0.5.2.\n\n- CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078).\n- CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'read_file' function. (bsc#1211078)\n","status":"published","published":"2023-10-03T18:10:09Z","modified":"2026-02-04T03:24:06.180702Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3954-2","title":"Security update for libeconf","description":"This update for libeconf fixes the following issues:\n\nUpdate to version 0.5.2.\n\n- CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078).\n- CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'read_file' function. (bsc#1211078)\n","status":"published","published":"2023-10-18T19:05:55Z","modified":"2026-02-04T02:48:04.284511Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2024:2426-1","title":"Security update for libeconf","description":"This update for libeconf fixes the following issues:\n\nUpdate to version 0.5.2.\n\n- CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078).\n- CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'read_file' function. (bsc#1211078)\n","status":"published","published":"2024-07-12T13:00:51Z","modified":"2026-02-04T02:34:52.442653Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"USN-8368-1","title":"libeconf vulnerability","description":"It was discovered that libeconf did not properly check the size of\ninput when copying data to a buffer. An attacker could possibly use\nthis issue to cause libeconf to crash, resulting in a denial of\nservice.","status":"published","published":"2026-06-02T13:09:17Z","modified":"2026-06-02T18:33:01.948764324Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}