{"id":"CVE-2023-2603","aliases":["ALPINE-CVE-2023-2603","ALSA-2023:4524","ALSA-2023:5071","AZL-27065","BELL-CVE-2023-2603","CLSA-2023-1688677606","CLSA-2023-1688678245","CLSA-2023-1699379448","DEBIAN-CVE-2023-2603","DLA-4092-1","EUVD-2023-34077","GHSA-wp54-pwvg-rqq5","MGASA-2023-0205","OESA-2023-1342","OESA-2023-1343","OESA-2023-1344","OESA-2023-1345","RHSA-2023:4524","RHSA-2023:5071","RHSA-2023:7400","RHSA-2024:0436","RLSA-2023:4524","SUSE-SU-2023:2764-1","SUSE-SU-2023:2765-1","SUSE-SU-2023:2956-1","UBUNTU-CVE-2023-2603","USN-6166-1","USN-6166-2","openSUSE-SU-2024:12945-1"],"status":"published","title":"A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can...","description":"A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00579,"percentile":0.47944,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-190"],"published":"2023-05-15T00:00:00Z","modified":"2026-10-29T11:31:30Z","exploits":[{"source":"pocgithub","id":"Pazhanivelmani/external_libcap-Android10_r33_CVE-2023-2603","title":"Pazhanivelmani/external_libcap-Android10_r33_CVE-2023-2603","date":"2024-11-12","url":"https://github.com/Pazhanivelmani/external_libcap-Android10_r33_CVE-2023-2603"}],"fixes":[{"ecosystem":"Alpine:v3.15","package":"libcap","fixed_in":["2.61-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libcap","fixed_in":["2.64-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libcap","fixed_in":["2.66-r1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libcap","fixed_in":["2.60-2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libcap-dev","fixed_in":["1:2.24-12+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libcap2","fixed_in":["1:2.24-12+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libcap2-bin","fixed_in":["1:2.24-12+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-cap","fixed_in":["1:2.24-12+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libcap-dev","fixed_in":["1:2.25-1.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libcap2","fixed_in":["1:2.25-1.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libcap2-bin","fixed_in":["1:2.25-1.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-cap","fixed_in":["1:2.25-1.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libcap","fixed_in":["2.22-11.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libcap-devel","fixed_in":["2.22-11.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libcap2","fixed_in":["1:2.66-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libcap2","fixed_in":["1:2.66-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libcap2","fixed_in":["1:2.66-4"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libcap","fixed_in":["2.32-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"libcap","fixed_in":["2.32-6.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libcap-debuginfo","fixed_in":["0:2.48-8.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libcap-debugsource","fixed_in":["0:2.48-8.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libcap-devel","fixed_in":["0:2.48-8.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"libcap","fixed_in":["0:2.48-8.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"libcap-debuginfo","fixed_in":["0:2.48-8.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"libcap-debugsource","fixed_in":["0:2.48-8.el9_0.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libcap","fixed_in":["2.26-14.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libcap","fixed_in":["2.26-14.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libcap","fixed_in":["2.26-14.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"libcap","fixed_in":["2.26-150000.4.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"libcap","fixed_in":["2.26-150000.4.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"libcap","fixed_in":["2.26-150000.4.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libcap","fixed_in":["2.26-150000.4.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libcap","fixed_in":["2.26-150000.4.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libcap","fixed_in":["2.26-150000.4.9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libcap2","fixed_in":["1:2.24-0ubuntu2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libcap2","fixed_in":["1:2.24-12ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libcap2","fixed_in":["1:2.25-1.2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libcap2","fixed_in":["1:2.32-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libcap2","fixed_in":["1:2.44-1ubuntu0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.61-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.64-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.66-r1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-5.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-5.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-9.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-9.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libcap-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.24-12+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.24-12+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libcap2-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.24-12+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-cap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.24-12+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcap-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25-1.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25-1.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcap2-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25-1.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-cap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25-1.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-11.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-11.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.66-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.66-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.66-4"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.44-1+deb11u1"}]}],"versions":["1:2.44-1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:8","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46-1.1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.61-5.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.61-5.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-4.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-4.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-4.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-4.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-8.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-8.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-8.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-8.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-8.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-8.el9_0.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-14.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-14.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-14.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-150000.4.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-150000.4.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-150000.4.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-150000.4.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-150000.4.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-150000.4.9.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.24-0ubuntu2+esm1"}]}],"versions":["1:2.22-1.2ubuntu2","1:2.24-0ubuntu1","1:2.24-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.24-12ubuntu0.1~esm1"}]}],"versions":["1:2.24-9","1:2.24-12"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25-1.2ubuntu0.1~esm1"}]}],"versions":["1:2.25-1.1","1:2.25-1.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.32-1ubuntu0.1"}]}],"versions":["1:2.25-2","1:2.27-1","1:2.32-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.44-1ubuntu0.22.04.1"}]}],"versions":["1:2.44-1build1","1:2.44-1build2","1:2.44-1build3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.32-1ubuntu0.1"}]}],"versions":["1:2.25-2","1:2.27-1","1:2.32-1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.44-1ubuntu0.22.04.1"}]}],"versions":["1:2.44-1build1","1:2.44-1build2","1:2.44-1build3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.24-0ubuntu2+esm1"}]}],"versions":["1:2.22-1.2ubuntu2","1:2.24-0ubuntu1","1:2.24-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.24-12ubuntu0.1~esm1"}]}],"versions":["1:2.24-9","1:2.24-12"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25-1.2ubuntu0.1~esm1"}]}],"versions":["1:2.25-1.1","1:2.25-1.2"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"libcap_project","product":"libcap"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://www.x41-dsec.de/static/reports/X41-libcap-Code-Review-2023-OSTIF-Final-Report.pdf","tags":["x_transferred","Exploit","Technical Description","evidence","article","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209113","tags":["x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPEGCFMCN5KGCFX5Y2VTKR732TTD4ADW/","tags":["vendor-advisory","x_transferred","Broken Link","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ57ICDLMVYEREXQGZWL4GWI7FRJCRQT/","tags":["vendor-advisory","x_transferred","Broken Link","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2603","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ57ICDLMVYEREXQGZWL4GWI7FRJCRQT"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPEGCFMCN5KGCFX5Y2VTKR732TTD4ADW"},{"url":"https://github.com/advisories/GHSA-wp54-pwvg-rqq5"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-2603","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4524","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-2602","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-2603","tags":["report"]},{"url":"https://bugzilla.redhat.com/2209113","tags":["report"]},{"url":"https://bugzilla.redhat.com/2209114","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-4524.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5071","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-5071.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-2603","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1688677606","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1688678245","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos7-els/CLSA-2023-1699379448.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-2603","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0205.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31938","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2023/05/15/4","tags":["web","report"]},{"url":"https://sites.google.com/site/fullycapable/release-notes-for-libcap#h.iuvg7sbjg8pe","tags":["web","report"]},{"url":"https://www.openwall.com/lists/oss-security/2023/05/16/2","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-6166-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1342","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2602","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1343","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1344","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1345","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209114","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4524.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-2602","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-2603","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5071.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7400","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7400.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0436","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0436.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:4524","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232764-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1211419","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2603","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232765-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1211418","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2602","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232956-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-2603","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6166-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-2602","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-2603","description":"A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.","status":"published","published":"2023-06-06T00:00:00Z","modified":"2025-12-02T20:20:34.959Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:35:24.004321Z"}],"euvd":[{"id":"EUVD-2023-34077","description":"A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.","status":"published","published":"2023-06-06T00:00:00Z","modified":"2025-12-02T20:20:34Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:10.716009Z"}],"ghsa":[{"id":"GHSA-wp54-pwvg-rqq5","title":"A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can...","description":"A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.","status":"published","published":"2023-06-06T21:30:18Z","modified":"2024-10-10T18:31:07Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:58:28.497096Z"}],"nvd":[{"id":"CVE-2023-2603","description":"A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.","status":"published","published":"2023-06-06T20:15:13.187Z","modified":"2026-06-17T05:52:59.48Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:08:05.329837Z"}],"osv":[{"id":"ALPINE-CVE-2023-2603","description":"A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.","status":"published","published":"2023-06-06T20:15:13.187Z","modified":"2026-10-26T17:17:58.613648948Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:49.202584Z"},{"id":"AZL-27065","title":"CVE-2023-2603 affecting package libcap for versions less than 2.60-2","description":"A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.","status":"published","published":"2023-06-06T20:15:13Z","modified":"2026-04-21T04:24:02.350182Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"BELL-CVE-2023-2603","title":"CVE-2023-2603 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:21:33.469642Z","modified":"2026-01-26T09:45:42.798086Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-2603","description":"A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.","status":"published","published":"2023-06-06T20:15:13.187Z","modified":"2026-04-16T04:38:45.724561167Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:31.135751Z"},{"id":"DEBIAN-CVE-2023-2603","description":"A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.","status":"published","published":"2023-06-06T20:15:13.187Z","modified":"2026-10-26T18:00:43.052684604Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"OESA-2023-1342","title":"libcap security update","description":"This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.(CVE-2023-2602)\r\n\r\nA vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.(CVE-2023-2603)","status":"published","published":"2023-06-10T11:05:48Z","modified":"2026-08-18T01:17:41.804905216Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1343","title":"libcap security update","description":"This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.(CVE-2023-2603)","status":"published","published":"2023-06-10T11:05:48Z","modified":"2026-08-18T01:17:41.852155596Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1344","title":"libcap security update","description":"This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.(CVE-2023-2603)","status":"published","published":"2023-06-10T11:05:48Z","modified":"2026-08-18T01:17:41.986191823Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1345","title":"libcap security update","description":"This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.(CVE-2023-2602)\r\n\r\nA vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.(CVE-2023-2603)","status":"published","published":"2023-06-10T11:05:48Z","modified":"2026-08-18T01:17:41.803499378Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2023:4524","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2024-09-16T12:30:52Z","modified":"2025-12-03T11:10:33.032656Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:5071","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2024-09-16T12:31:02Z","modified":"2026-06-26T12:22:21.281933953Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7400","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2024-09-16T12:31:13Z","modified":"2026-03-18T11:33:39.553593Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0436","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2024-09-16T12:31:22Z","modified":"2026-06-26T12:21:19.324417388Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"UBUNTU-CVE-2023-2603","description":"A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.","status":"published","published":"2023-05-15T00:00:00Z","modified":"2026-04-22T14:03:31.24475Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:20.198616Z"},{"id":"ALSA-2023:4524","title":"Moderate: libcap security update","description":"Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\n\nSecurity Fix(es):\n\n* libcap: Integer Overflow in _libcap_strdup() (CVE-2023-2603)\n* libcap: Memory Leak on pthread_create() Error (CVE-2023-2602)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-08-08T00:00:00Z","modified":"2026-10-29T11:02:20.007278646Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:5071","title":"Moderate: libcap security update","description":"Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\n\nSecurity Fix(es):\n\n* libcap: Integer Overflow in _libcap_strdup() (CVE-2023-2603)\n* libcap: Memory Leak on pthread_create() Error (CVE-2023-2602)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-12T00:00:00Z","modified":"2026-10-29T11:31:30.632559273Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2023-1688677606","title":"Fix CVE(s): CVE-2023-2603","description":"\n    * SECURITY UPDATE: Integer overflow in _libcap_strdup()\n     - debian/patches/CVE-2023-2603.patch: enhance libcap's internal strdup\n       code to limit the processing of long strings\n     - CVE-2023-2603","status":"published","published":"2023-07-06T21:06:51Z","modified":"2026-06-04T10:03:34.229504Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1688678245","title":"Fix CVE(s): CVE-2023-2603","description":"\n    * SECURITY UPDATE: Integer overflow in _libcap_strdup()\n     - debian/patches/CVE-2023-2603.patch: enhance libcap's internal strdup\n       code to limit the processing of long strings\n     - CVE-2023-2603","status":"published","published":"2023-07-06T21:17:29Z","modified":"2026-06-04T10:03:55.79983Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1699379448","title":"libcap: Fix of CVE-2023-2603","description":"- CVE-2023-2603: integer overflow if the input string is close to 4GiB.","status":"published","published":"2023-11-07T17:50:52Z","modified":"2026-06-01T00:33:17.332685702Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"DLA-4092-1","title":"libcap2 - security update","status":"published","published":"2025-03-26T00:00:00Z","modified":"2026-03-09T01:19:22.06574Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2023-0205","title":"Updated libcap packages fix security vulnerability","description":"A vulnerability was found in the pthread_create() function in libcap. This\nissue may allow a malicious actor to use cause __real_pthread_create() to\nreturn an error, which can exhaust the process memory. (CVE-2023-2602)\n\nA vulnerability was found in libcap. This issue occurs in the _libcap_strdup()\nfunction and can lead to an integer overflow if the input string is close\nto 4GiB. (CVE-2023-2603)\n","status":"published","published":"2023-06-28T05:21:41Z","modified":"2026-04-16T04:42:24.46226495Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12945-1","title":"libcap-devel-2.69-1.1 on GA media","description":"These are all security issues fixed in the libcap-devel-2.69-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:58:16.78376Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"RLSA-2023:4524","title":"Moderate: libcap security update","description":"Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\n\nSecurity Fix(es):\n\n* libcap: Integer Overflow in _libcap_strdup() (CVE-2023-2603)\n\n* libcap: Memory Leak on pthread_create() Error (CVE-2023-2602)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-08-24T04:20:17.019312Z","modified":"2026-02-05T05:45:08.93849Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2023:2764-1","title":"Security update for libcap","description":"This update for libcap fixes the following issues:\n\n- CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419).\n","status":"published","published":"2023-07-03T15:58:07Z","modified":"2026-02-04T03:11:35.457396Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2765-1","title":"Security update for libcap","description":"This update for libcap fixes the following issues:\n\n- CVE-2023-2602: Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create() (bsc#1211418).\n- CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419).\n","status":"published","published":"2023-07-03T18:29:52Z","modified":"2026-02-04T03:42:54.947247Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2956-1","title":"Security update for libcap","description":"This update for libcap fixes the following issues:\n\n- CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419).\n","status":"published","published":"2023-07-25T06:33:56Z","modified":"2026-02-04T03:25:40.828813Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"USN-6166-1","title":"libcap2 vulnerabilities","description":"David Gstir discovered that libcap2 incorrectly handled certain return\ncodes. An attacker could possibly use this issue to cause libcap2 to\nconsume memory, leading to a denial of service. (CVE-2023-2602)\n\nRichard Weinberger discovered that libcap2 incorrectly handled certain long\ninput strings. An attacker could use this issue to cause libcap2 to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2023-2603)\n","status":"published","published":"2023-06-14T13:40:25Z","modified":"2026-04-27T16:47:16.78141422Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-6166-2","title":"libcap2 vulnerability","description":"USN-6166-1 fixed a vulnerability in libcap2. This update provides\nthe corresponding update for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM\nand Ubuntu 18.04 ESM.\n\nOriginal advisory details:\n\n Richard Weinberger discovered that libcap2 incorrectly handled certain long\n input strings. An attacker could use this issue to cause libcap2 to crash,\n resulting in a denial of service, or possibly execute arbitrary code.\n (CVE-2023-2603)\n","status":"published","published":"2023-06-19T11:49:36Z","modified":"2026-06-29T13:50:52.801252446Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}