{ "id": "openEuler-SA-2023-1345", "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1345", "title": "An update for libcap is now available for openEuler-22.03-LTS", "severity": "Medium", "description": "This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.(CVE-2023-2602)\r\n\r\nA vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.(CVE-2023-2603)", "cves": [ { "id": "CVE-2023-2603", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2603", "severity": "Low" } ] }