Risk | Medium |
Patch available | YES |
Number of vulnerabilities | 1 |
CVE-ID | CVE-2023-4039 |
CWE-ID | CWE-254 |
Exploitation vector | Network |
Public exploit | N/A |
Vulnerable software |
SUSE Linux Enterprise Micro Operating systems & Components / Operating system openSUSE Leap Micro Operating systems & Components / Operating system Development Tools Module Operating systems & Components / Operating system SUSE Package Hub 15 Operating systems & Components / Operating system Basesystem Module Operating systems & Components / Operating system SUSE Linux Enterprise Micro for Rancher Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Applications 15 Operating systems & Components / Operating system SUSE Linux Enterprise Server 15 Operating systems & Components / Operating system SUSE Linux Enterprise Real Time 15 Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing 15 Operating systems & Components / Operating system SUSE Linux Enterprise Desktop 15 Operating systems & Components / Operating system openSUSE Leap Operating systems & Components / Operating system SUSE Manager Retail Branch Server Operating systems & Components / Operating system SUSE Manager Server Operating systems & Components / Operating system SUSE Manager Proxy Operating systems & Components / Operating system libquadmath0 Operating systems & Components / Operating system package or component libquadmath0-debuginfo Operating systems & Components / Operating system package or component libhwasan0 Operating systems & Components / Operating system package or component libhwasan0-debuginfo Operating systems & Components / Operating system package or component gcc13-info Operating systems & Components / Operating system package or component libgphobos4-debuginfo Operating systems & Components / Operating system package or component libgdruntime4-debuginfo Operating systems & Components / Operating system package or component gcc13-d Operating systems & Components / Operating system package or component libgdruntime4 Operating systems & Components / Operating system package or component gcc13-d-debuginfo Operating systems & Components / Operating system package or component libgphobos4 Operating systems & Components / Operating system package or component gcc13-fortran-32bit Operating systems & Components / Operating system package or component libatomic1-32bit-debuginfo Operating systems & Components / Operating system package or component libm2log18-32bit Operating systems & Components / Operating system package or component libstdc++6-devel-gcc13-32bit Operating systems & Components / Operating system package or component libm2pim18-32bit Operating systems & Components / Operating system package or component libgo22-32bit-debuginfo Operating systems & Components / Operating system package or component gcc13-c++-32bit Operating systems & Components / Operating system package or component libgphobos4-32bit-debuginfo Operating systems & Components / Operating system package or component libm2min18-32bit Operating systems & Components / Operating system package or component libgfortran5-32bit-debuginfo Operating systems & Components / Operating system package or component libgcc_s1-32bit-debuginfo Operating systems & Components / Operating system package or component libm2cor18-32bit Operating systems & Components / Operating system package or component libgomp1-32bit Operating systems & Components / Operating system package or component gcc13-obj-c++-32bit Operating systems & Components / Operating system package or component libm2min18-32bit-debuginfo Operating systems & Components / Operating system package or component libgfortran5-32bit Operating systems & Components / Operating system package or component libada13-32bit-debuginfo Operating systems & Components / Operating system package or component libstdc++6-pp-32bit Operating systems & Components / Operating system package or component libitm1-32bit-debuginfo Operating systems & Components / Operating system package or component gcc13-ada-32bit Operating systems & Components / Operating system package or component libada13-32bit Operating systems & Components / Operating system package or component libubsan1-32bit Operating systems & Components / Operating system package or component libm2iso18-32bit-debuginfo Operating systems & Components / Operating system package or component gcc13-32bit Operating systems & Components / Operating system package or component libgdruntime4-32bit Operating systems & Components / Operating system package or component libobjc4-32bit-debuginfo Operating systems & Components / Operating system package or component libm2iso18-32bit Operating systems & Components / Operating system package or component libgdruntime4-32bit-debuginfo Operating systems & Components / Operating system package or component gcc13-m2-32bit Operating systems & Components / Operating system package or component gcc13-objc-32bit Operating systems & Components / Operating system package or component libstdc++6-32bit-debuginfo Operating systems & Components / Operating system package or component libstdc++6-32bit Operating systems & Components / Operating system package or component libatomic1-32bit Operating systems & Components / Operating system package or component libubsan1-32bit-debuginfo Operating systems & Components / Operating system package or component gcc13-go-32bit Operating systems & Components / Operating system package or component gcc13-d-32bit Operating systems & Components / Operating system package or component libobjc4-32bit Operating systems & Components / Operating system package or component libm2log18-32bit-debuginfo Operating systems & Components / Operating system package or component libgcc_s1-32bit Operating systems & Components / Operating system package or component libasan8-32bit-debuginfo Operating systems & Components / Operating system package or component libm2cor18-32bit-debuginfo Operating systems & Components / Operating system package or component libitm1-32bit Operating systems & Components / Operating system package or component libgphobos4-32bit Operating systems & Components / Operating system package or component libasan8-32bit Operating systems & Components / Operating system package or component libgomp1-32bit-debuginfo Operating systems & Components / Operating system package or component libm2pim18-32bit-debuginfo Operating systems & Components / Operating system package or component libgo22-32bit Operating systems & Components / Operating system package or component cross-nvptx-gcc13-debuginfo Operating systems & Components / Operating system package or component libquadmath0-32bit-debuginfo Operating systems & Components / Operating system package or component cross-nvptx-gcc13-debugsource Operating systems & Components / Operating system package or component libquadmath0-32bit Operating systems & Components / Operating system package or component cross-nvptx-gcc13 Operating systems & Components / Operating system package or component cross-nvptx-newlib13-devel Operating systems & Components / Operating system package or component libtsan2 Operating systems & Components / Operating system package or component libgfortran5-debuginfo Operating systems & Components / Operating system package or component libada13-debuginfo Operating systems & Components / Operating system package or component libitm1 Operating systems & Components / Operating system package or component gcc13-obj-c++-debuginfo Operating systems & Components / Operating system package or component libm2pim18-debuginfo Operating systems & Components / Operating system package or component libasan8-debuginfo Operating systems & Components / Operating system package or component gcc13-c++ Operating systems & Components / Operating system package or component gcc13 Operating systems & Components / Operating system package or component libm2iso18-debuginfo Operating systems & Components / Operating system package or component gcc13-objc-debuginfo Operating systems & Components / Operating system package or component cpp13 Operating systems & Components / Operating system package or component libasan8 Operating systems & Components / Operating system package or component libm2min18 Operating systems & Components / Operating system package or component gcc13-go-debuginfo Operating systems & Components / Operating system package or component libm2log18 Operating systems & Components / Operating system package or component libstdc++6-devel-gcc13 Operating systems & Components / Operating system package or component liblsan0 Operating systems & Components / Operating system package or component libm2min18-debuginfo Operating systems & Components / Operating system package or component gcc13-m2-debuginfo Operating systems & Components / Operating system package or component gcc13-c++-debuginfo Operating systems & Components / Operating system package or component libubsan1-debuginfo Operating systems & Components / Operating system package or component gcc13-locale Operating systems & Components / Operating system package or component liblsan0-debuginfo Operating systems & Components / Operating system package or component libm2iso18 Operating systems & Components / Operating system package or component libstdc++6-locale Operating systems & Components / Operating system package or component libm2log18-debuginfo Operating systems & Components / Operating system package or component gcc13-ada Operating systems & Components / Operating system package or component libitm1-debuginfo Operating systems & Components / Operating system package or component gcc13-objc Operating systems & Components / Operating system package or component libgfortran5 Operating systems & Components / Operating system package or component libgomp1-debuginfo Operating systems & Components / Operating system package or component libgo22 Operating systems & Components / Operating system package or component cpp13-debuginfo Operating systems & Components / Operating system package or component libatomic1-debuginfo Operating systems & Components / Operating system package or component libm2cor18 Operating systems & Components / Operating system package or component gcc13-PIE Operating systems & Components / Operating system package or component gcc13-fortran-debuginfo Operating systems & Components / Operating system package or component libgomp1 Operating systems & Components / Operating system package or component libm2pim18 Operating systems & Components / Operating system package or component libm2cor18-debuginfo Operating systems & Components / Operating system package or component libtsan2-debuginfo Operating systems & Components / Operating system package or component libobjc4 Operating systems & Components / Operating system package or component libada13 Operating systems & Components / Operating system package or component gcc13-m2 Operating systems & Components / Operating system package or component libatomic1 Operating systems & Components / Operating system package or component gcc13-fortran Operating systems & Components / Operating system package or component gcc13-obj-c++ Operating systems & Components / Operating system package or component gcc13-go Operating systems & Components / Operating system package or component gcc13-ada-debuginfo Operating systems & Components / Operating system package or component libubsan1 Operating systems & Components / Operating system package or component libstdc++6-pp Operating systems & Components / Operating system package or component libobjc4-debuginfo Operating systems & Components / Operating system package or component libgo22-debuginfo Operating systems & Components / Operating system package or component libgcc_s1 Operating systems & Components / Operating system package or component libstdc++6-debuginfo Operating systems & Components / Operating system package or component libgcc_s1-debuginfo Operating systems & Components / Operating system package or component libstdc++6 Operating systems & Components / Operating system package or component gcc13-debugsource Operating systems & Components / Operating system package or component gcc13-debuginfo Operating systems & Components / Operating system package or component |
Vendor | SUSE |
Security Bulletin
This security bulletin contains one medium risk vulnerability.
EUVDB-ID: #VU81045
Risk: Medium
CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2023-4039
CWE-ID:
CWE-254 - Security Features
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to the GCC's stack smashing protection does not detect or defend against overflows of dynamically-sized local variables on AArch64 targets. A remote attacker can bypass expected security restrictions and successfully exploit buffer overflow vulnerabilities.
Update the affected package gcc13 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Micro: 5.1 - 5.5
openSUSE Leap Micro: 5.3 - 5.4
Development Tools Module: 15-SP4 - 15-SP5
SUSE Package Hub 15: 15-SP4 - 15-SP5
Basesystem Module: 15-SP4 - 15-SP5
SUSE Linux Enterprise Micro for Rancher: 5.2 - 5.4
SUSE Linux Enterprise Server for SAP Applications 15: SP4 - SP5
SUSE Linux Enterprise Server 15: SP2 - SP5
SUSE Linux Enterprise Real Time 15: SP4 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP4 - SP5
SUSE Linux Enterprise Desktop 15: SP4 - SP5
openSUSE Leap: 15.4 - 15.5
SUSE Manager Retail Branch Server: 4.2 - 4.3
SUSE Manager Server: 4.2 - 4.3
SUSE Manager Proxy: 4.2 - 4.3
libquadmath0: before 13.2.1+git7813-150000.1.3.3
libquadmath0-debuginfo: before 13.2.1+git7813-150000.1.3.3
libhwasan0: before 13.2.1+git7813-150000.1.3.3
libhwasan0-debuginfo: before 13.2.1+git7813-150000.1.3.3
gcc13-info: before 13.2.1+git7813-150000.1.3.3
libgphobos4-debuginfo: before 13.2.1+git7813-150000.1.3.3
libgdruntime4-debuginfo: before 13.2.1+git7813-150000.1.3.3
gcc13-d: before 13.2.1+git7813-150000.1.3.3
libgdruntime4: before 13.2.1+git7813-150000.1.3.3
gcc13-d-debuginfo: before 13.2.1+git7813-150000.1.3.3
libgphobos4: before 13.2.1+git7813-150000.1.3.3
gcc13-fortran-32bit: before 13.2.1+git7813-150000.1.3.3
libatomic1-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
libm2log18-32bit: before 13.2.1+git7813-150000.1.3.3
libstdc++6-devel-gcc13-32bit: before 13.2.1+git7813-150000.1.3.3
libm2pim18-32bit: before 13.2.1+git7813-150000.1.3.3
libgo22-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
gcc13-c++-32bit: before 13.2.1+git7813-150000.1.3.3
libgphobos4-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
libm2min18-32bit: before 13.2.1+git7813-150000.1.3.3
libgfortran5-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
libgcc_s1-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
libm2cor18-32bit: before 13.2.1+git7813-150000.1.3.3
libgomp1-32bit: before 13.2.1+git7813-150000.1.3.3
gcc13-obj-c++-32bit: before 13.2.1+git7813-150000.1.3.3
libm2min18-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
libgfortran5-32bit: before 13.2.1+git7813-150000.1.3.3
libada13-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
libstdc++6-pp-32bit: before 13.2.1+git7813-150000.1.3.3
libitm1-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
gcc13-ada-32bit: before 13.2.1+git7813-150000.1.3.3
libada13-32bit: before 13.2.1+git7813-150000.1.3.3
libubsan1-32bit: before 13.2.1+git7813-150000.1.3.3
libm2iso18-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
gcc13-32bit: before 13.2.1+git7813-150000.1.3.3
libgdruntime4-32bit: before 13.2.1+git7813-150000.1.3.3
libobjc4-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
libm2iso18-32bit: before 13.2.1+git7813-150000.1.3.3
libgdruntime4-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
gcc13-m2-32bit: before 13.2.1+git7813-150000.1.3.3
gcc13-objc-32bit: before 13.2.1+git7813-150000.1.3.3
libstdc++6-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
libstdc++6-32bit: before 13.2.1+git7813-150000.1.3.3
libatomic1-32bit: before 13.2.1+git7813-150000.1.3.3
libubsan1-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
gcc13-go-32bit: before 13.2.1+git7813-150000.1.3.3
gcc13-d-32bit: before 13.2.1+git7813-150000.1.3.3
libobjc4-32bit: before 13.2.1+git7813-150000.1.3.3
libm2log18-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
libgcc_s1-32bit: before 13.2.1+git7813-150000.1.3.3
libasan8-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
libm2cor18-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
libitm1-32bit: before 13.2.1+git7813-150000.1.3.3
libgphobos4-32bit: before 13.2.1+git7813-150000.1.3.3
libasan8-32bit: before 13.2.1+git7813-150000.1.3.3
libgomp1-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
libm2pim18-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
libgo22-32bit: before 13.2.1+git7813-150000.1.3.3
cross-nvptx-gcc13-debuginfo: before 13.2.1+git7813-150000.1.3.2
libquadmath0-32bit-debuginfo: before 13.2.1+git7813-150000.1.3.3
cross-nvptx-gcc13-debugsource: before 13.2.1+git7813-150000.1.3.2
libquadmath0-32bit: before 13.2.1+git7813-150000.1.3.3
cross-nvptx-gcc13: before 13.2.1+git7813-150000.1.3.2
cross-nvptx-newlib13-devel: before 13.2.1+git7813-150000.1.3.2
libtsan2: before 13.2.1+git7813-150000.1.3.3
libgfortran5-debuginfo: before 13.2.1+git7813-150000.1.3.3
libada13-debuginfo: before 13.2.1+git7813-150000.1.3.3
libitm1: before 13.2.1+git7813-150000.1.3.3
gcc13-obj-c++-debuginfo: before 13.2.1+git7813-150000.1.3.3
libm2pim18-debuginfo: before 13.2.1+git7813-150000.1.3.3
libasan8-debuginfo: before 13.2.1+git7813-150000.1.3.3
gcc13-c++: before 13.2.1+git7813-150000.1.3.3
gcc13: before 13.2.1+git7813-150000.1.3.3
libm2iso18-debuginfo: before 13.2.1+git7813-150000.1.3.3
gcc13-objc-debuginfo: before 13.2.1+git7813-150000.1.3.3
cpp13: before 13.2.1+git7813-150000.1.3.3
libasan8: before 13.2.1+git7813-150000.1.3.3
libm2min18: before 13.2.1+git7813-150000.1.3.3
gcc13-go-debuginfo: before 13.2.1+git7813-150000.1.3.3
libm2log18: before 13.2.1+git7813-150000.1.3.3
libstdc++6-devel-gcc13: before 13.2.1+git7813-150000.1.3.3
liblsan0: before 13.2.1+git7813-150000.1.3.3
libm2min18-debuginfo: before 13.2.1+git7813-150000.1.3.3
gcc13-m2-debuginfo: before 13.2.1+git7813-150000.1.3.3
gcc13-c++-debuginfo: before 13.2.1+git7813-150000.1.3.3
libubsan1-debuginfo: before 13.2.1+git7813-150000.1.3.3
gcc13-locale: before 13.2.1+git7813-150000.1.3.3
liblsan0-debuginfo: before 13.2.1+git7813-150000.1.3.3
libm2iso18: before 13.2.1+git7813-150000.1.3.3
libstdc++6-locale: before 13.2.1+git7813-150000.1.3.3
libm2log18-debuginfo: before 13.2.1+git7813-150000.1.3.3
gcc13-ada: before 13.2.1+git7813-150000.1.3.3
libitm1-debuginfo: before 13.2.1+git7813-150000.1.3.3
gcc13-objc: before 13.2.1+git7813-150000.1.3.3
libgfortran5: before 13.2.1+git7813-150000.1.3.3
libgomp1-debuginfo: before 13.2.1+git7813-150000.1.3.3
libgo22: before 13.2.1+git7813-150000.1.3.3
cpp13-debuginfo: before 13.2.1+git7813-150000.1.3.3
libatomic1-debuginfo: before 13.2.1+git7813-150000.1.3.3
libm2cor18: before 13.2.1+git7813-150000.1.3.3
gcc13-PIE: before 13.2.1+git7813-150000.1.3.3
gcc13-fortran-debuginfo: before 13.2.1+git7813-150000.1.3.3
libgomp1: before 13.2.1+git7813-150000.1.3.3
libm2pim18: before 13.2.1+git7813-150000.1.3.3
libm2cor18-debuginfo: before 13.2.1+git7813-150000.1.3.3
libtsan2-debuginfo: before 13.2.1+git7813-150000.1.3.3
libobjc4: before 13.2.1+git7813-150000.1.3.3
libada13: before 13.2.1+git7813-150000.1.3.3
gcc13-m2: before 13.2.1+git7813-150000.1.3.3
libatomic1: before 13.2.1+git7813-150000.1.3.3
gcc13-fortran: before 13.2.1+git7813-150000.1.3.3
gcc13-obj-c++: before 13.2.1+git7813-150000.1.3.3
gcc13-go: before 13.2.1+git7813-150000.1.3.3
gcc13-ada-debuginfo: before 13.2.1+git7813-150000.1.3.3
libubsan1: before 13.2.1+git7813-150000.1.3.3
libstdc++6-pp: before 13.2.1+git7813-150000.1.3.3
libobjc4-debuginfo: before 13.2.1+git7813-150000.1.3.3
libgo22-debuginfo: before 13.2.1+git7813-150000.1.3.3
libgcc_s1: before 13.2.1+git7813-150000.1.3.3
libstdc++6-debuginfo: before 13.2.1+git7813-150000.1.3.3
libgcc_s1-debuginfo: before 13.2.1+git7813-150000.1.3.3
libstdc++6: before 13.2.1+git7813-150000.1.3.3
gcc13-debugsource: before 13.2.1+git7813-150000.1.3.3
gcc13-debuginfo: before 13.2.1+git7813-150000.1.3.3
CPE2.3https://www.suse.com/support/update/announcement/2023/suse-su-20234162-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.