← Back

Libqb

libqb

Vendor: Clusterlabs • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-39976
1Clusterlabs
1Libqb
Jun 17, 2026
Aug 8, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.
CVE-2019-12779
1Clusterlabs
1Libqb
Jun 17, 2026
Jun 7, 2019
N/A· v4
7.1 HIGH· v3
6.6 MEDIUM· v2
libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.