log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libqb-develUpgrade libqb | Nov 16, 2023 | Aug 8, 2023 |
| Amazon_linux_2023 | — | Upgrade doxygen2man-debuginfoUpgrade libqbUpgrade libqb-debuginfoUpgrade libqb-develUpgrade doxygen2manUpgrade libqb-debugsource | Feb 17, 2025 | Aug 8, 2023 |
| Centos_linux | — | Upgrade doxygen2man-debuginfoUpgrade libqb-debuginfoUpgrade libqb-tests-debuginfoUpgrade libqb-debugsourceUpgrade libqb | Nov 8, 2023 | Aug 8, 2023 |
| Debian | — | Upgrade libqbNo solution exists | May 15, 2025 | Aug 8, 2023 |
| Freebsd | — | Upgrade libqb | Nov 6, 2024 | Nov 4, 2024 |
| Oracle_linux | — | Upgrade libqb | Jul 22, 2024 | Aug 8, 2023 |
| Redhat_linux | — | Upgrade libqb-debuginfoUpgrade libqb-debugsourceNo solution existsUpgrade doxygen2man-debuginfoUpgrade libqbUpgrade libqb-tests-debuginfoUpgrade libqb-devel | Oct 11, 2023 | Aug 8, 2023 |
| Suse | — | Upgrade libqb-testsUpgrade libqb100-32bitUpgrade libqb-toolsUpgrade doxygen2manUpgrade libqb100Upgrade libqb20Upgrade libqb-develUpgrade libqb-devel-32bitUpgrade libqb20-32bit | Sep 25, 2023 | Aug 8, 2023 |
| Ubuntu | — | Upgrade libqb100Upgrade doxygen2manUpgrade libqb-tools | Aug 29, 2023 | Aug 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub