Read the docs
TI-2023-20869 Aliases CVE-2023-39976GHSA-4fvg-53ww-3r5g

log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages…

Priority MEDIUM 51CWE-120Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 9 fixed, 2 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-120 and the CVSS impact.

Summary

log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01182 67th percentileScored 2026-11-07
Fix Partial Red Hat: 3 advisoriesRed Hat: 9 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:clusterlabs:libqb:*:*:*:*:*:*:*:*before 2.0.8VulnerableClusterLabs
  • cpe:2.3:a:clusterlabs:libqb:*:*:*:*:*:*:*:* Versions before 2.0.8 Vulnerable ·ClusterLabs

Remediation

Red Hat 3 advisories

  • RHSA-2023:7376 Released 2023-11-21 · Red Hat rating Moderate
    libqb security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) libqb-2.0.6-3.el9_2
    • Red Hat Enterprise Linux High Availability EUS (v.9.2) libqb-devel-2.0.6-3.el9_2
    • Red Hat Enterprise Linux Resilient Storage EUS (v.9.2) libqb-devel-2.0.6-3.el9_2
  • RHSA-2023:6578 Released 2023-11-07 · Red Hat rating Moderate
    libqb security update
    • Red Hat Enterprise Linux AppStream (v. 9) libqb-2.0.6-4.el9_3
    • Red Hat Enterprise Linux High Availability (v. 9) libqb-devel-2.0.6-4.el9_3
    • Red Hat Enterprise Linux Resilient Storage (v. 9) libqb-devel-2.0.6-4.el9_3
  • RHSA-2023:5597 Released 2023-10-10 · Red Hat rating Moderate
    libqb security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) libqb-2.0.3-12.el9_0
    • Red Hat Enterprise Linux High Availability EUS (v.9.0) libqb-devel-2.0.3-12.el9_0
    • Red Hat Enterprise Linux Resilient Storage EUS (v.9.0) libqb-devel-2.0.3-12.el9_0

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2023:6578
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2023:5597
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2023:7376
Red Hat Enterprise Linux High Availability (v. 9)Fixed RHSA-2023:6578
Red Hat Enterprise Linux High Availability EUS (v.9.0)Fixed RHSA-2023:5597
Red Hat Enterprise Linux High Availability EUS (v.9.2)Fixed RHSA-2023:7376
Red Hat Enterprise Linux Resilient Storage (v. 9)Fixed RHSA-2023:6578
Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)Fixed RHSA-2023:5597
Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)Fixed RHSA-2023:7376
Not affected: 1 product
  • Red Hat Enterprise Linux 8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-39976
  2. 2026-10-03 Alias added: GHSA-4fvg-53ww-3r5g

References

Patch 2

Advisory 1

Other 1

  • TI-2019-09565 libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack… CVSS 3.0HIGH 7.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences