log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libqb-develUpgrade libqb | Nov 16, 2023 | Aug 8, 2023 |
| Amazon_linux_2023 | — | Upgrade libqb-debuginfoUpgrade libqb-develUpgrade doxygen2man-debuginfoUpgrade libqbUpgrade doxygen2manUpgrade libqb-debugsource | Feb 17, 2025 | Aug 8, 2023 |
| Centos_linux | — | Upgrade libqb-debugsourceUpgrade libqbUpgrade libqb-tests-debuginfoUpgrade libqb-debuginfoUpgrade doxygen2man-debuginfo | Nov 8, 2023 | Aug 8, 2023 |
| Debian | — | Upgrade libqbNo solution exists | May 15, 2025 | Aug 8, 2023 |
| Freebsd | — | Upgrade libqb | Nov 6, 2024 | Nov 4, 2024 |
| Oracle_linux | — | Upgrade libqb | Jul 22, 2024 | Aug 8, 2023 |
| Redhat_linux | — | Upgrade libqb-tests-debuginfoUpgrade doxygen2man-debuginfoUpgrade libqbUpgrade libqb-develNo solution existsUpgrade libqb-debuginfoUpgrade libqb-debugsource | Oct 11, 2023 | Aug 8, 2023 |
| Suse | — | Upgrade libqb100-32bitUpgrade libqb-testsUpgrade libqb-toolsUpgrade libqb-develUpgrade libqb100Upgrade libqb-devel-32bitUpgrade libqb20-32bitUpgrade libqb20Upgrade doxygen2man | Sep 25, 2023 | Aug 8, 2023 |
| Ubuntu | — | Upgrade libqb-toolsUpgrade libqb100Upgrade doxygen2man | Aug 29, 2023 | Aug 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub