CVE-2023-30079 Information

Description

A stack overflow vulnerability exists in function read_file in atlibeconf/lib/getfilecontents.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code.

Reference

https://raw.githubusercontent.com/yangjiageng/PoC/master/libeconf-PoC/tst-logindefs1.c https://github.com/openSUSE/libeconf/issues/177 https://github.com/yangjiageng/PoC/blob/master/libeconf-PoC/read_file_503

Share on: