log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libqbUpgrade libqb-devel | Nov 16, 2023 | Aug 8, 2023 |
| Amazon_linux_2023 | — | Upgrade libqbUpgrade doxygen2man-debuginfoUpgrade libqb-develUpgrade libqb-debuginfoUpgrade libqb-debugsourceUpgrade doxygen2man | Feb 17, 2025 | Aug 8, 2023 |
| Centos_linux | — | Upgrade libqbUpgrade libqb-debugsourceUpgrade libqb-tests-debuginfoUpgrade doxygen2man-debuginfoUpgrade libqb-debuginfo | Nov 8, 2023 | Aug 8, 2023 |
| Debian | — | No solution existsUpgrade libqb | May 15, 2025 | Aug 8, 2023 |
| Freebsd | — | Upgrade libqb | Nov 6, 2024 | Nov 4, 2024 |
| Oracle_linux | — | Upgrade libqb | Jul 22, 2024 | Aug 8, 2023 |
| Redhat_linux | — | Upgrade libqb-develUpgrade doxygen2man-debuginfoUpgrade libqbUpgrade libqb-tests-debuginfoUpgrade libqb-debugsourceUpgrade libqb-debuginfoNo solution exists | Oct 11, 2023 | Aug 8, 2023 |
| Suse | — | Upgrade libqb20Upgrade libqb100Upgrade libqb20-32bitUpgrade libqb-develUpgrade doxygen2manUpgrade libqb-devel-32bitUpgrade libqb-testsUpgrade libqb-toolsUpgrade libqb100-32bit | Sep 25, 2023 | Aug 8, 2023 |
| Ubuntu | — | Upgrade libqb-toolsUpgrade doxygen2manUpgrade libqb100 | Aug 29, 2023 | Aug 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub