cvrf2cusa/cusa/l/libcap/libcap-2.61-5_openEuler-SA-2023-1345.json
Jia Chao fd42fc96e3 release v0.1.2
Signed-off-by: Jia Chao <jiac13@chinaunicom.cn>
2024-08-01 10:25:22 +08:00

14 lines
932 B
JSON

{
"id": "openEuler-SA-2023-1345",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1345",
"title": "An update for libcap is now available for openEuler-22.03-LTS",
"severity": "Medium",
"description": "This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.(CVE-2023-2602)\r\n\r\nA vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.(CVE-2023-2603)",
"cves": [
{
"id": "CVE-2023-2603",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2603",
"severity": "Low"
}
]
}