The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pkgconf | Mar 26, 2024 | Jan 22, 2023 |
| Amazon_linux_2023 | — | Upgrade libpkgconf-debuginfoUpgrade libpkgconf-develUpgrade pkgconfUpgrade pkgconf-m4Upgrade pkgconf-pkg-configUpgrade libpkgconfUpgrade pkgconf-debuginfoUpgrade pkgconf-debugsource | Feb 17, 2025 | Jan 21, 2023 |
| Debian | — | Upgrade pkgconf | Jul 30, 2024 | Jan 22, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade pkgconf | Mar 20, 2023 | Jan 22, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade pkgconf | May 8, 2023 | Jan 22, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade pkgconfUpgrade pkgconf-m4Upgrade libpkgconfUpgrade pkgconf-pkg-config | Apr 13, 2023 | Jan 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade pkgconf | May 10, 2023 | Jan 22, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 22, 2023 |
| Suse | — | Upgrade libpkgconf-develUpgrade libpkgconf3Upgrade pkgconf | Feb 13, 2023 | Jan 22, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub