CVE-2019-9633

EPSS 0.65%
Published 08.03.2019 08:29:00
Last modified 21.11.2024 04:52:00
Source cve@mitre.org
Teams watchlist Login
Open Login

gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service (g_socket_client_connected_callback mishandling and application crash) via a crafted web site, as demonstrated by GNOME Web (aka Epiphany).

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Gnome ≫ Glib Version2.59.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.65%	0.685

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

http://www.securityfocus.com/bid/107391

Third Party Advisory

VDB Entry

https://gitlab.gnome.org/GNOME/glib/issues/1649

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-9633

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-9633

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-9633

EUVD