Bug 2209113 (CVE-2023-2603)

Summary:	CVE-2023-2603 libcap: Integer Overflow in _libcap_strdup()
Product:	[Other] Security Response	Reporter:	juneau
Component:	vulnerability	Assignee:	Nobody <nobody>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	ansasaki, bdettelb, jmitchel, jtanner, kshier, lgriffin, rsroka
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2210634, 2210635, 2210636, 2210637, 2210638, 2210639, 2235776
Bug Blocks:	2207492

Description juneau 2023-05-22 16:54:28 UTC

Original Report:

Source: libcap2
Version: 1:2.66-3
Severity: important
Tags: security upstream
X-Debbugs-Cc: carnil, Debian Security Team <team.org>

The following vulnerabilities were published for libcap2.

CVE-2023-2603[1]:
| LCAP-CR-23-02 (Large strings can confuse libcap's internal strdup code)

[1] https://security-tracker.debian.org/tracker/CVE-2023-2603
    https://www.cve.org/CVERecord?id=CVE-2023-2603

fixed in 1:2.66-4

Comment 2 Sandipan Roy 2023-05-29 04:15:24 UTC

Created libcap tracking bugs for this issue:

Affects: fedora-37 [bug 2210634]
Affects: fedora-38 [bug 2210635]

Comment 7 errata-xmlrpc 2023-08-08 08:19:56 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2023:4524 https://access.redhat.com/errata/RHSA-2023:4524

Comment 9 errata-xmlrpc 2023-09-12 10:13:04 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2023:5071 https://access.redhat.com/errata/RHSA-2023:5071

Comment 10 errata-xmlrpc 2023-11-21 11:41:34 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Extended Update Support

Via RHSA-2023:7400 https://access.redhat.com/errata/RHSA-2023:7400

Comment 12 errata-xmlrpc 2024-01-24 15:26:21 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Extended Update Support

Via RHSA-2024:0436 https://access.redhat.com/errata/RHSA-2024:0436