log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7376 advisory.

  - libqb: Buffer overflow in log_blackbox.c (CVE-2023-39976)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6578 advisory.

  - log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header     size is not considered. (CVE-2023-39976)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6578 advisory.

  - libqb: Buffer overflow in log_blackbox.c (CVE-2023-39976)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5597 advisory.

  - libqb: Buffer overflow in log_blackbox.c (CVE-2023-39976)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3944-1 advisory.

  - log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header     size is not considered. (CVE-2023-39976)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3897-1 advisory.

  - log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header     size is not considered. (CVE-2023-39976)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:3727-1 advisory.

  - log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header     size is not considered. (CVE-2023-39976)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3728-1 advisory.

  - log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header     size is not considered. (CVE-2023-39976)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6308-1 advisory.

  - log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header     size is not considered. (CVE-2023-39976)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-294 advisory.

  - log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header     size is not considered. (CVE-2023-39976)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-5a717dd33d advisory.

  - log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header     size is not considered. (CVE-2023-39976)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
186063	RHEL 9 : libqb (RHSA-2023:7376)	Nessus	Red Hat Local Security Checks	critical
185843	Oracle Linux 9 : libqb (ELSA-2023-6578)	Nessus	Oracle Linux Local Security Checks	critical
185159	RHEL 9 : libqb (RHSA-2023:6578)	Nessus	Red Hat Local Security Checks	critical
182836	RHEL 9 : libqb (RHSA-2023:5597)	Nessus	Red Hat Local Security Checks	critical
182506	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libqb (SUSE-SU-2023:3944-1)	Nessus	SuSE Local Security Checks	critical
182393	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libqb (SUSE-SU-2023:3897-1)	Nessus	SuSE Local Security Checks	critical
181827	SUSE SLES15 Security Update : libqb (SUSE-SU-2023:3727-1)	Nessus	SuSE Local Security Checks	critical
181819	SUSE SLES15 / openSUSE 15 Security Update : libqb (SUSE-SU-2023:3728-1)	Nessus	SuSE Local Security Checks	critical
180223	Ubuntu 22.04 LTS / 23.04 : Libqb vulnerability (USN-6308-1)	Nessus	Ubuntu Local Security Checks	critical
180128	Amazon Linux 2023 : doxygen2man, libqb, libqb-devel (ALAS2023-2023-294)	Nessus	Amazon Linux Local Security Checks	critical
180104	Fedora 38 : libqb (2023-5a717dd33d)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2023-39976

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical