{"id":"CVE-2023-39976","aliases":["ALSA-2023:6578","AZL-27859","AZL-36957","CLSA-2025-1762182516","CLSA-2026-1791385137","DEBIAN-CVE-2023-39976","EUVD-2023-43669","GHSA-4fvg-53ww-3r5g","MGASA-2023-0339","RHSA-2023:5597","RHSA-2023:6578","RHSA-2023:7376","SUSE-SU-2023:3727-1","SUSE-SU-2023:3728-1","SUSE-SU-2023:3897-1","SUSE-SU-2023:3944-1","UBUNTU-CVE-2023-39976","USN-6308-1","openSUSE-SU-2024:13450-1"],"status":"published","title":"log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the...","description":"log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01182,"percentile":0.68155,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2023-08-08T00:00:00Z","modified":"2026-10-29T11:31:58Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"libqb","fixed_in":["2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libqb-devel","fixed_in":["2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libqb","fixed_in":["2.0.8-1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"doxygen2man","fixed_in":["2.0.6-2.el9.tuxcare.els1","2.0.6-2.el9_1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libqb","fixed_in":["2.0.6-2.el9.tuxcare.els1","2.0.6-2.el9_1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libqb-devel","fixed_in":["2.0.6-2.el9.tuxcare.els1","2.0.6-2.el9_1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libqb-tests","fixed_in":["2.0.6-2.el9.tuxcare.els1","2.0.6-2.el9_1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libqb","fixed_in":["2.0.8-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libqb","fixed_in":["2.0.8-1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"libqb","fixed_in":["2.0.8-1.mga9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"doxygen2man-debuginfo","fixed_in":["0:2.0.3-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libqb","fixed_in":["0:2.0.3-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libqb-debuginfo","fixed_in":["0:2.0.3-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libqb-debugsource","fixed_in":["0:2.0.3-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libqb-tests-debuginfo","fixed_in":["0:2.0.3-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::highavailability","package":"doxygen2man-debuginfo","fixed_in":["0:2.0.3-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::highavailability","package":"libqb-debuginfo","fixed_in":["0:2.0.3-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::highavailability","package":"libqb-debugsource","fixed_in":["0:2.0.3-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::highavailability","package":"libqb-devel","fixed_in":["0:2.0.3-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::highavailability","package":"libqb-tests-debuginfo","fixed_in":["0:2.0.3-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::resilientstorage","package":"doxygen2man-debuginfo","fixed_in":["0:2.0.3-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::resilientstorage","package":"libqb-debuginfo","fixed_in":["0:2.0.3-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::resilientstorage","package":"libqb-debugsource","fixed_in":["0:2.0.3-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::resilientstorage","package":"libqb-devel","fixed_in":["0:2.0.3-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::resilientstorage","package":"libqb-tests-debuginfo","fixed_in":["0:2.0.3-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"doxygen2man-debuginfo","fixed_in":["0:2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libqb","fixed_in":["0:2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libqb-debuginfo","fixed_in":["0:2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libqb-debugsource","fixed_in":["0:2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libqb-tests-debuginfo","fixed_in":["0:2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"doxygen2man-debuginfo","fixed_in":["0:2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"libqb-debuginfo","fixed_in":["0:2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"libqb-debugsource","fixed_in":["0:2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"libqb-devel","fixed_in":["0:2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"libqb-tests-debuginfo","fixed_in":["0:2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"doxygen2man-debuginfo","fixed_in":["0:2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"libqb-debuginfo","fixed_in":["0:2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"libqb-debugsource","fixed_in":["0:2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"libqb-devel","fixed_in":["0:2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"libqb-tests-debuginfo","fixed_in":["0:2.0.6-4.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"doxygen2man-debuginfo","fixed_in":["0:2.0.6-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libqb","fixed_in":["0:2.0.6-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libqb-debuginfo","fixed_in":["0:2.0.6-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libqb-debugsource","fixed_in":["0:2.0.6-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libqb-tests-debuginfo","fixed_in":["0:2.0.6-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"doxygen2man-debuginfo","fixed_in":["0:2.0.6-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"libqb-debuginfo","fixed_in":["0:2.0.6-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"libqb-debugsource","fixed_in":["0:2.0.6-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"libqb-devel","fixed_in":["0:2.0.6-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"libqb-tests-debuginfo","fixed_in":["0:2.0.6-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"doxygen2man-debuginfo","fixed_in":["0:2.0.6-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"libqb-debuginfo","fixed_in":["0:2.0.6-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"libqb-debugsource","fixed_in":["0:2.0.6-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"libqb-devel","fixed_in":["0:2.0.6-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"libqb-tests-debuginfo","fixed_in":["0:2.0.6-3.el9_2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"libqb","fixed_in":["2.0.2+20201203.def947e-150300.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP1","package":"libqb","fixed_in":["1.0.3+20190326.a521604-150100.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP2","package":"libqb","fixed_in":["1.0.3+20190326.a521604-150100.3.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libqb","fixed_in":["1.0.3+20190326.a521604-150100.3.9.1","2.0.4+20211112.a2691b9-150400.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libqb","fixed_in":["2.0.6+20220323.758044b-150500.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP5","package":"libqb","fixed_in":["2.0.6+20220323.758044b-150500.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"libqb","fixed_in":["2.0.6+20220323.758044b-150500.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libqb","fixed_in":["2.0.4+20211112.a2691b9-150400.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"libqb","fixed_in":["2.0.4+20211112.a2691b9-150400.4.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libqb","fixed_in":["2.0.4-1ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libqb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.0.5-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.8-1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"doxygen2man","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libqb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libqb-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"doxygen2man","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-2.el9_1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-2.el9_1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libqb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-2.el9_1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libqb-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-2.el9_1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.10-1","2.0.10-2","2.0.6-2","2.0.7-1","2.0.8-1","2.0.8-2","2.0.9-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.8-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.8-1"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.8-1.mga9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"doxygen2man-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libqb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libqb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libqb-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::highavailability","package":"doxygen2man-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::highavailability","package":"libqb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::highavailability","package":"libqb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::highavailability","package":"libqb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::highavailability","package":"libqb-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::resilientstorage","package":"doxygen2man-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::resilientstorage","package":"libqb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::resilientstorage","package":"libqb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::resilientstorage","package":"libqb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::resilientstorage","package":"libqb-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"doxygen2man-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libqb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libqb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libqb-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"doxygen2man-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"libqb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"libqb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"libqb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"libqb-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"doxygen2man-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"libqb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"libqb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"libqb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"libqb-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-4.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"doxygen2man-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libqb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libqb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libqb-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"doxygen2man-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"libqb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"libqb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"libqb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"libqb-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"doxygen2man-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"libqb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"libqb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"libqb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"libqb-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-3.el9_2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2+20201203.def947e-150300.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP1","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3+20190326.a521604-150100.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP2","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3+20190326.a521604-150100.3.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3+20190326.a521604-150100.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6+20220323.758044b-150500.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP5","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6+20220323.758044b-150500.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6+20220323.758044b-150500.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4+20211112.a2691b9-150400.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4+20211112.a2691b9-150400.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4+20211112.a2691b9-150400.4.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-1ubuntu0.2"}]}],"versions":["2.0.3-1build1","2.0.4-1","2.0.4-1build1","2.0.4-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-1ubuntu0.2"}]}],"versions":["2.0.3-1build1","2.0.4-1","2.0.4-1build1","2.0.4-1ubuntu0.1"]}],"products":[{"vendor":"clusterlabs","product":"libqb"}],"references":[{"url":"https://github.com/ClusterLabs/libqb/pull/490","tags":["x_transferred","Patch","fix","report"]},{"url":"https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8","tags":["x_transferred","Patch","fix","report"]},{"url":"https://github.com/ClusterLabs/libqb/compare/v2.0.7...v2.0.8","tags":["x_transferred","Not Applicable","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39976","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KECNF7LFBPE57XSBT6EM7ACVMIBP63WH"},{"url":"https://github.com/advisories/GHSA-4fvg-53ww-3r5g"},{"url":"https://access.redhat.com/errata/RHSA-2023:6578","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39976","tags":["report"]},{"url":"https://bugzilla.redhat.com/2230708","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6578.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1762182516.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1791385137.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39976.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-39976","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0339.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32558","tags":["report"]},{"url":"https://lwn.net/Articles/952259/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5597","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2230708","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5597.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39976","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6578.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7376","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7376.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233727-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1214066","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-39976","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233728-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233897-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233944-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-39976","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6308-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-39976","description":"log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.","status":"published","published":"2023-08-08T00:00:00Z","modified":"2024-10-15T17:56:46.579Z","updated_at":"2026-11-02T14:35:33.138994Z"}],"euvd":[{"id":"EUVD-2023-43669","description":"log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.","status":"published","published":"2023-08-08T00:00:00Z","modified":"2024-10-15T17:56:46Z","updated_at":"2026-11-03T00:27:36.689661Z"}],"ghsa":[{"id":"GHSA-4fvg-53ww-3r5g","title":"log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the...","description":"log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.","status":"published","published":"2023-08-08T06:30:18Z","modified":"2024-04-11T21:10:16Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:57:07.969203Z"}],"nvd":[{"id":"CVE-2023-39976","description":"log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.","status":"published","published":"2023-08-08T06:15:46.59Z","modified":"2026-06-17T06:13:04.437Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:08:20.798312Z"}],"osv":[{"id":"AZL-27859","title":"CVE-2023-39976 affecting package libqb 1.0.5-7","description":"log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.","status":"published","published":"2023-08-08T06:15:46Z","modified":"2026-04-21T04:25:41.350594Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-36957","title":"CVE-2023-39976 affecting package libqb for versions less than 2.0.8-1","description":"log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.","status":"published","published":"2023-08-08T06:15:46Z","modified":"2026-04-21T04:33:09.412019Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"DEBIAN-CVE-2023-39976","description":"log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.","status":"published","published":"2023-08-08T06:15:46.59Z","modified":"2026-10-26T18:02:31.878704134Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"RHSA-2023:5597","title":"Red Hat Security Advisory: libqb security update","status":"published","published":"2024-09-16T13:23:04Z","modified":"2026-06-26T12:22:19.9534571Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6578","title":"Red Hat Security Advisory: libqb security update","status":"published","published":"2024-09-16T13:23:15Z","modified":"2026-06-26T12:22:31.018639991Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7376","title":"Red Hat Security Advisory: libqb security update","status":"published","published":"2024-09-16T13:23:25Z","modified":"2026-06-26T12:22:21.661499143Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"UBUNTU-CVE-2023-39976","description":"log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.","status":"published","published":"2023-08-08T06:15:00Z","modified":"2026-04-22T14:11:32.03418Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"ALSA-2023:6578","title":"Moderate: libqb security update","description":"The libqb packages provide a library with the primary purpose of providing high performance client/server reusable features, such as high performance logging, tracing, inter-process communication, and polling.\n\nSecurity Fix(es):\n\n* libqb: Buffer overflow in log_blackbox.c (CVE-2023-39976)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-10-29T11:31:58.521888274Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2025-1762182516","title":"libqb: Fix of CVE-2023-39976","description":"- CVE-2023-39976: Fix buffer overflow in log_blackbox.c by correctly limiting log\n  message length","status":"published","published":"2025-11-03T15:08:44Z","modified":"2026-06-01T00:31:19.521063068Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2026-1791385137","title":"libqb: Fix of CVE-2023-39976","description":"- CVE-2023-39976: Fix buffer overflow in log_blackbox.c by correctly limiting\n  log message length\n- rebuild with the vendor .el9_1 dist so the update outranks AlmaLinux\n  2.0.6-2.el9_1","status":"published","published":"2026-10-07T14:59:04Z","modified":"2026-10-26T09:30:53.621242783Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"CVE-2023-39976","description":"log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.","status":"published","published":"2023-08-08T00:00:00Z","modified":"2026-10-28T10:35:05.547994182Z","updated_at":"2026-11-02T15:44:33.244128Z"},{"id":"MGASA-2023-0339","title":"Updated libqb packages fix a security vulnerability","description":"This update fixes a security issue.\n\nlog_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long\nlog messages because the header size is not considered (CVE-2023-39976)\n","status":"published","published":"2023-12-04T20:37:23Z","modified":"2026-04-16T04:44:23.561929088Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13450-1","title":"doxygen2man-2.0.8+20230721.002171b-2.1 on GA media","description":"These are all security issues fixed in the doxygen2man-2.0.8+20230721.002171b-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:16:44.950081Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-SU-2023:3727-1","title":"Security update for libqb","description":"This update for libqb fixes the following issues:\n\n- CVE-2023-39976: Fixed potential buffer overflow with long log messages (bsc#1214066).\n","status":"published","published":"2023-09-22T11:12:08Z","modified":"2026-02-04T02:18:44.321351Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3728-1","title":"Security update for libqb","description":"This update for libqb fixes the following issues:\n\n- CVE-2023-39976: Fixed potential buffer overflow with long log messages (bsc#1214066).\n","status":"published","published":"2023-09-22T11:12:51Z","modified":"2026-02-04T03:03:27.570197Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3897-1","title":"Security update for libqb","description":"This update for libqb fixes the following issues:\n\n- CVE-2023-39976: Fixed potential buffer overflow with long log messages (bsc#1214066).\n","status":"published","published":"2023-09-29T09:21:49Z","modified":"2026-02-04T04:17:37.804035Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3944-1","title":"Security update for libqb","description":"This update for libqb fixes the following issues:\n\n- CVE-2023-39976: Fixed potential bufferoverflow with long log messages (bsc#1214066).\n","status":"published","published":"2023-10-03T16:34:55Z","modified":"2026-02-04T04:22:27.573717Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"USN-6308-1","title":"libqb vulnerability","description":"It was discovered that Libqb incorrectly handled certain messages.\nAn attacker could possibly use this issue to cause a crash or execute\narbitrary code.\n","status":"published","published":"2023-08-28T16:44:34Z","modified":"2026-04-22T10:38:46.716801Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}