log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libqbUpgrade libqb-devel | Nov 16, 2023 | Aug 8, 2023 |
| Amazon_linux_2023 | — | Upgrade libqb-debugsourceUpgrade doxygen2manUpgrade libqbUpgrade libqb-debuginfoUpgrade libqb-develUpgrade doxygen2man-debuginfo | Feb 17, 2025 | Aug 8, 2023 |
| Centos_linux | — | Upgrade doxygen2man-debuginfoUpgrade libqb-debuginfoUpgrade libqb-tests-debuginfoUpgrade libqbUpgrade libqb-debugsource | Nov 8, 2023 | Aug 8, 2023 |
| Debian | — | Upgrade libqb | May 15, 2025 | Aug 8, 2023 |
| Freebsd | — | Upgrade libqb | Nov 6, 2024 | Nov 4, 2024 |
| Oracle_linux | — | Upgrade libqb | Jul 22, 2024 | Aug 8, 2023 |
| Redhat_linux | — | Upgrade libqb-tests-debuginfoUpgrade libqbUpgrade libqb-develUpgrade doxygen2man-debuginfoUpgrade libqb-debuginfoUpgrade libqb-debugsourceNo solution exists | Oct 11, 2023 | Aug 8, 2023 |
| Suse | — | Upgrade libqb-devel-32bitUpgrade libqb20Upgrade doxygen2manUpgrade libqb20-32bitUpgrade libqb100Upgrade libqb-develUpgrade libqb100-32bitUpgrade libqb-toolsUpgrade libqb-tests | Sep 25, 2023 | Aug 8, 2023 |
| Ubuntu | — | Upgrade libqb-toolsUpgrade libqb100Upgrade doxygen2man | Aug 29, 2023 | Aug 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub