CVE Catalog

CVE-2023-39976

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.98%

58th percentile - higher than 58% of all known CVEs

Summary

The log_blackbox.c file in libqb before version 2.0.8 has a buffer overflow vulnerability due to long log messages, as the header size is not considered.

Risk Assessment

An attacker could exploit this vulnerability to execute malicious code, potentially leading to system compromise or data loss.

Recommendation

It is recommended to update the libqb library to version 2.0.8 or later to mitigate this vulnerability.

Original NVD description (English source)

log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS