Gnome

Glib

23 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2025-4056

  • EPSS 0.03%
  • Veröffentlicht 28.07.2025 12:40:29
  • Zuletzt bearbeitet 13.08.2025 19:40:02

A flaw was found in GLib. A denial of service on Windows platforms may occur if an application attempts to spawn a program using long command lines.

7.5

CVE-2025-6052

  • EPSS 0.06%
  • Veröffentlicht 13.06.2025 15:40:38
  • Zuletzt bearbeitet 20.08.2025 17:27:24

A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory w...

9.8

CVE-2024-52533

Exploit
  • EPSS 2.46%
  • Veröffentlicht 11.11.2024 23:15:05
  • Zuletzt bearbeitet 17.06.2025 01:23:56

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

5.2

CVE-2024-34397

Exploit
  • EPSS 0.1%
  • Veröffentlicht 07.05.2024 18:15:08
  • Zuletzt bearbeitet 18.06.2025 14:36:02

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can ...

5.5

CVE-2023-32665

  • EPSS 0.06%
  • Veröffentlicht 14.09.2023 20:15:09
  • Zuletzt bearbeitet 21.11.2024 08:03:48

A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.

7.8

CVE-2023-32643

  • EPSS 0.04%
  • Veröffentlicht 14.09.2023 20:15:09
  • Zuletzt bearbeitet 21.11.2024 08:03:45

A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the gu...

7.5

CVE-2023-32636

  • EPSS 0.17%
  • Veröffentlicht 14.09.2023 20:15:09
  • Zuletzt bearbeitet 21.11.2024 08:03:44

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect a...

5.5

CVE-2023-32611

  • EPSS 0.03%
  • Veröffentlicht 14.09.2023 20:15:09
  • Zuletzt bearbeitet 21.11.2024 08:03:41

A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.

7.5

CVE-2023-29499

  • EPSS 0.11%
  • Veröffentlicht 14.09.2023 20:15:09
  • Zuletzt bearbeitet 21.11.2024 07:57:10

A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.

5.5

CVE-2021-3800

Exploit
  • EPSS 0.06%
  • Veröffentlicht 23.08.2022 16:15:09
  • Zuletzt bearbeitet 21.11.2024 06:22:28

A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.