Opensuse Libeconf vulnerabilities

2 CVEs affecting Opensuse Libeconf, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-32181, published 2023-06-01.

More from Opensuse.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-22652, published 2023-06-01. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.
• CVE-2023-32181, published 2023-06-01. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before…