log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libqbUpgrade libqb-devel | Nov 16, 2023 | Aug 8, 2023 |
| Amazon_linux_2023 | — | Upgrade doxygen2manUpgrade libqb-debugsourceUpgrade libqb-debuginfoUpgrade libqb-develUpgrade libqbUpgrade doxygen2man-debuginfo | Feb 17, 2025 | Aug 8, 2023 |
| Centos_linux | — | Upgrade libqb-tests-debuginfoUpgrade doxygen2man-debuginfoUpgrade libqb-debuginfoUpgrade libqbUpgrade libqb-debugsource | Nov 8, 2023 | Aug 8, 2023 |
| Debian | — | Upgrade libqb | May 15, 2025 | Aug 8, 2023 |
| Freebsd | — | Upgrade libqb | Nov 6, 2024 | Nov 4, 2024 |
| Oracle_linux | — | Upgrade libqb | Jul 22, 2024 | Aug 8, 2023 |
| Redhat_linux | — | No solution existsUpgrade libqb-debugsourceUpgrade libqb-debuginfoUpgrade libqb-tests-debuginfoUpgrade libqb-develUpgrade doxygen2man-debuginfoUpgrade libqb | Oct 11, 2023 | Aug 8, 2023 |
| Suse | — | Upgrade libqb100Upgrade libqb20Upgrade doxygen2manUpgrade libqb-develUpgrade libqb20-32bitUpgrade libqb-devel-32bitUpgrade libqb100-32bitUpgrade libqb-toolsUpgrade libqb-tests | Sep 25, 2023 | Aug 8, 2023 |
| Ubuntu | — | Upgrade libqb-toolsUpgrade doxygen2manUpgrade libqb100 | Aug 29, 2023 | Aug 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub