{"id":"CVE-2023-2602","aliases":["ALPINE-CVE-2023-2602","ALSA-2023:4524","ALSA-2023:5071","AZL-27064","BELL-CVE-2023-2602","DEBIAN-CVE-2023-2602","DLA-4092-1","EUVD-2023-34076","GHSA-7wq6-hwpj-wcq2","MGASA-2023-0205","OESA-2023-1342","OESA-2023-1345","RHSA-2023:4524","RHSA-2023:5071","RHSA-2023:7400","RLSA-2023:4524","SUSE-SU-2023:2765-1","UBUNTU-CVE-2023-2602","USN-6166-1","openSUSE-SU-2024:12945-1"],"status":"published","title":"A vulnerability was found in the pthread_create() function in libcap. This issue may allow a...","description":"A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00352,"percentile":0.29143,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-401"],"published":"2023-05-15T00:00:00Z","modified":"2026-10-29T11:31:30Z","fixes":[{"ecosystem":"Alpine:v3.15","package":"libcap","fixed_in":["2.61-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libcap","fixed_in":["2.64-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libcap","fixed_in":["2.66-r1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libcap","fixed_in":["2.60-2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libcap2","fixed_in":["1:2.66-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libcap2","fixed_in":["1:2.66-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libcap2","fixed_in":["1:2.66-4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libcap2","fixed_in":["1:2.32-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libcap2","fixed_in":["1:2.44-1ubuntu0.22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libcap2","fixed_in":["1:2.66-4ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.61-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.64-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.66-r1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-5.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-5.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-9.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-9.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.66-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.66-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.66-4"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.44-1+deb11u1"}]}],"versions":["1:2.44-1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:8","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46-1.1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.61-5.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.61-5.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-4.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-4.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-4.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-4.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.22-1.2ubuntu2","1:2.24-0ubuntu1","1:2.24-0ubuntu2","1:2.24-0ubuntu2+esm1","1:2.24-0ubuntu2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.24-9","1:2.24-12","1:2.24-12ubuntu0.1~esm1","1:2.24-12ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.25-1.1","1:2.25-1.2","1:2.25-1.2ubuntu0.1~esm1","1:2.25-1.2ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.32-1ubuntu0.1"}]}],"versions":["1:2.25-2","1:2.27-1","1:2.32-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.44-1ubuntu0.22.04.1"}]}],"versions":["1:2.44-1build1","1:2.44-1build2","1:2.44-1build3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.66-4ubuntu1"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.32-1ubuntu0.1"}]}],"versions":["1:2.25-2","1:2.27-1","1:2.32-1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.44-1ubuntu0.22.04.1"}]}],"versions":["1:2.44-1build1","1:2.44-1build2","1:2.44-1build3"],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"libcap_project","product":"libcap"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209114","tags":["x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://www.x41-dsec.de/static/reports/X41-libcap-Code-Review-2023-OSTIF-Final-Report.pdf","tags":["x_transferred","Exploit","Technical Description","evidence","article","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPEGCFMCN5KGCFX5Y2VTKR732TTD4ADW/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ57ICDLMVYEREXQGZWL4GWI7FRJCRQT/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2602","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-7wq6-hwpj-wcq2"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-2602","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4524","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-2602","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-2603","tags":["report"]},{"url":"https://bugzilla.redhat.com/2209113","tags":["report"]},{"url":"https://bugzilla.redhat.com/2209114","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-4524.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5071","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-5071.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-2602","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-2602","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0205.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31938","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2023/05/15/4","tags":["web","report"]},{"url":"https://sites.google.com/site/fullycapable/release-notes-for-libcap#h.iuvg7sbjg8pe","tags":["web","report"]},{"url":"https://www.openwall.com/lists/oss-security/2023/05/16/2","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-6166-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1342","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2603","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1345","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209113","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4524.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-2602","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-2603","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5071.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7400","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7400.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:4524","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232765-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1211418","tags":["report"]},{"url":"https://bugzilla.suse.com/1211419","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2603","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-2602","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-2603","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-2602","description":"A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.","status":"published","published":"2023-06-06T00:00:00Z","modified":"2024-08-02T06:26:09.688Z","cwes":["CWE-401"],"updated_at":"2026-11-02T14:35:23.645864Z"}],"euvd":[{"id":"EUVD-2023-34076","description":"A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.","status":"published","published":"2023-06-06T00:00:00Z","modified":"2024-08-02T06:26:09Z","updated_at":"2026-11-03T03:50:14.098658Z"}],"ghsa":[{"id":"GHSA-7wq6-hwpj-wcq2","title":"A vulnerability was found in the pthread_create() function in libcap. This issue may allow a...","description":"A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.","status":"published","published":"2023-06-06T21:30:18Z","modified":"2023-11-30T06:33:22Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:55:07.446793Z"}],"nvd":[{"id":"CVE-2023-2602","description":"A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.","status":"published","published":"2023-06-06T20:15:12.76Z","modified":"2026-06-17T05:52:59.313Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"primary"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:08:05.329837Z"}],"osv":[{"id":"ALPINE-CVE-2023-2602","description":"A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.","status":"published","published":"2023-06-06T20:15:12.76Z","modified":"2026-10-26T17:17:58.613123451Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:27:49.202584Z"},{"id":"AZL-27064","title":"CVE-2023-2602 affecting package libcap for versions less than 2.60-2","description":"A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.","status":"published","published":"2023-06-06T20:15:12Z","modified":"2026-04-21T04:24:02.204816Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"BELL-CVE-2023-2602","title":"CVE-2023-2602 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:21:31.926314Z","modified":"2026-01-26T09:46:50.603293Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-2602","description":"A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.","status":"published","published":"2023-06-06T20:15:12.76Z","modified":"2026-04-16T04:32:25.03365122Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:31.135751Z"},{"id":"DEBIAN-CVE-2023-2602","description":"A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.","status":"published","published":"2023-06-06T20:15:12.76Z","modified":"2026-10-26T18:02:10.243679991Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"OESA-2023-1342","title":"libcap security update","description":"This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.(CVE-2023-2602)\r\n\r\nA vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.(CVE-2023-2603)","status":"published","published":"2023-06-10T11:05:48Z","modified":"2026-08-18T01:17:41.804905216Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1345","title":"libcap security update","description":"This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.(CVE-2023-2602)\r\n\r\nA vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.(CVE-2023-2603)","status":"published","published":"2023-06-10T11:05:48Z","modified":"2026-08-18T01:17:41.803499378Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2023:4524","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2024-09-16T12:30:52Z","modified":"2025-12-03T11:10:33.032656Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:5071","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2024-09-16T12:31:02Z","modified":"2026-06-26T12:22:21.281933953Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7400","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2024-09-16T12:31:13Z","modified":"2026-03-18T11:33:39.553593Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"UBUNTU-CVE-2023-2602","description":"A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.","status":"published","published":"2023-05-15T00:00:00Z","modified":"2026-06-23T22:00:08.013598265Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T16:54:20.198616Z"},{"id":"ALSA-2023:4524","title":"Moderate: libcap security update","description":"Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\n\nSecurity Fix(es):\n\n* libcap: Integer Overflow in _libcap_strdup() (CVE-2023-2603)\n* libcap: Memory Leak on pthread_create() Error (CVE-2023-2602)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-08-08T00:00:00Z","modified":"2026-10-29T11:02:20.007278646Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:5071","title":"Moderate: libcap security update","description":"Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\n\nSecurity Fix(es):\n\n* libcap: Integer Overflow in _libcap_strdup() (CVE-2023-2603)\n* libcap: Memory Leak on pthread_create() Error (CVE-2023-2602)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-12T00:00:00Z","modified":"2026-10-29T11:31:30.632559273Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"DLA-4092-1","title":"libcap2 - security update","status":"published","published":"2025-03-26T00:00:00Z","modified":"2026-03-09T01:19:22.06574Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2023-0205","title":"Updated libcap packages fix security vulnerability","description":"A vulnerability was found in the pthread_create() function in libcap. This\nissue may allow a malicious actor to use cause __real_pthread_create() to\nreturn an error, which can exhaust the process memory. (CVE-2023-2602)\n\nA vulnerability was found in libcap. This issue occurs in the _libcap_strdup()\nfunction and can lead to an integer overflow if the input string is close\nto 4GiB. (CVE-2023-2603)\n","status":"published","published":"2023-06-28T05:21:41Z","modified":"2026-04-16T04:42:24.46226495Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12945-1","title":"libcap-devel-2.69-1.1 on GA media","description":"These are all security issues fixed in the libcap-devel-2.69-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:58:16.78376Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"RLSA-2023:4524","title":"Moderate: libcap security update","description":"Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\n\nSecurity Fix(es):\n\n* libcap: Integer Overflow in _libcap_strdup() (CVE-2023-2603)\n\n* libcap: Memory Leak on pthread_create() Error (CVE-2023-2602)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-08-24T04:20:17.019312Z","modified":"2026-02-05T05:45:08.93849Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2023:2765-1","title":"Security update for libcap","description":"This update for libcap fixes the following issues:\n\n- CVE-2023-2602: Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create() (bsc#1211418).\n- CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419).\n","status":"published","published":"2023-07-03T18:29:52Z","modified":"2026-02-04T03:42:54.947247Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"USN-6166-1","title":"libcap2 vulnerabilities","description":"David Gstir discovered that libcap2 incorrectly handled certain return\ncodes. An attacker could possibly use this issue to cause libcap2 to\nconsume memory, leading to a denial of service. (CVE-2023-2602)\n\nRichard Weinberger discovered that libcap2 incorrectly handled certain long\ninput strings. An attacker could use this issue to cause libcap2 to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2023-2603)\n","status":"published","published":"2023-06-14T13:40:25Z","modified":"2026-04-27T16:47:16.78141422Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}