The remote NewStart CGSL host, running version MAIN 7.02, has libeconf packages installed that are affected by multiple vulnerabilities:

  - A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE     libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2.
    (CVE-2023-32181)

  - A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE     libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.
    (CVE-2023-22652)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4347 advisory.

    Libeconf is a highly flexible and configurable library to parse and manage key=value configuration files.
    It reads configuration file snippets from different directories and builds the final configuration file     from it.

    Security Fix(es):

    * libeconf: stack-based buffer overflow in read_file() in lib/getfilecontents.c (CVE-2023-22652)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-6432bb65ae advisory.

    Rebase to 0.5.2 to fix CVE-2023-22652 and CVE-2023-30079

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-86b710bb4f advisory.

    Rebase to 0.5.2 to fix CVE-2023-22652 and CVE-2023-30079

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE     libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.
    (CVE-2023-22652)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4164 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4164-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                           Chris Lamb     May 12, 2025                                  https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : libeconf     Version        : 0.3.8-1+deb11u1     CVE ID         : CVE-2023-22652     Debian Bug     : 1037333

    It was discovered that there was a potential buffer overflow     vulnerability in libeconf, a configuration file parser. This could     have been exploited via malicously-crafted configuration files.

    For Debian 11 bullseye, this problem has been fixed in version     0.3.8-1+deb11u1.

    We recommend that you upgrade your libeconf packages.

    For the detailed security status of libeconf please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libeconf

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6286:01 advisory.

    * libeconf: stack-based buffer overflow in read_file() in lib/getfilecontents.c (CVE-2023-22652)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8368-1 advisory.

    It was discovered that libeconf did not properly check the size of input when copying data to a buffer. An     attacker could possibly use this issue to cause libeconf to crash, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
242728	NewStart CGSL MAIN 7.02 : libeconf Multiple Vulnerabilities (NS-SA-2025-0131)	Nessus	NewStart CGSL Local Security Checks	7/25/2025	7/25/2025	medium
179156	RHEL 9 : libeconf (RHSA-2023:4347)	Nessus	Red Hat Local Security Checks	8/1/2023	9/24/2025	medium
180436	Fedora 38 : libeconf (2023-6432bb65ae)	Nessus	Fedora Local Security Checks	9/1/2023	9/24/2025	medium
185269	Fedora 39 : libeconf (2023-86b710bb4f)	Nessus	Fedora Local Security Checks	11/7/2023	9/24/2025	medium
225896	Linux Distros Unpatched Vulnerability : CVE-2023-22652	Nessus	Misc.	3/5/2025	8/19/2026	medium
235730	Debian dla-4164 : libeconf-dev - security update	Nessus	Debian Local Security Checks	5/12/2025	5/12/2025	medium
292029	MiracleLinux 9 : libeconf-0.4.1-3.el9 (AXSA:2023-6286:01)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	medium
318623	Ubuntu 22.04 LTS : libeconf vulnerability (USN-8368-1)	Nessus	Ubuntu Local Security Checks	6/4/2026	6/4/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium