Lucene search

K

RedhatCVELIST:CVE-2023-2602

HistoryJun 06, 2023 - 12:00 a.m.

CVE-2023-2602

2023-06-0600:00:00

CWE-401

redhat

www.cve.org

3

vulnerability

libcap

pthread_create

process memory

cve-2023-2602

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.2%

A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "libcap",
    "versions": [
      {
        "version": "NA",
        "status": "affected"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=2209114

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ57ICDLMVYEREXQGZWL4GWI7FRJCRQT/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPEGCFMCN5KGCFX5Y2VTKR732TTD4ADW/

www.x41-dsec.de/static/reports/X41-libcap-Code-Review-2023-OSTIF-Final-Report.pdf

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.2%

Related for CVELIST:CVE-2023-2602

nessus25 openvas8 debiancve1 amazon1 redhatcve1 osv5 ubuntucve1 prion1 nvd1 alpinelinux1 cve1 cbl_mariner1 veracode1 oraclelinux2 almalinux2 fedora2 rocky1 redhat57 cloudfoundry1 mageia1 ubuntu1 photon2 ibm13 hp1