Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
amazonAmazonALAS2-2023-2049
HistoryMay 11, 2023 - 5:49 p.m.

Important: glib2

2023-05-1117:49:00
alas.aws.amazon.com
33

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.032 Low

EPSS

Percentile

91.1%

JSON

Issue Overview:

In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference. (CVE-2018-16428)

GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str(). (CVE-2018-16429)

Affected Packages:

glib2

Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.

Issue Correction:
Run yum update glib2 to update your system.

New Packages:

aarch64:  
    glib2-2.56.1-9.amzn2.0.3.aarch64  
    glib2-devel-2.56.1-9.amzn2.0.3.aarch64  
    glib2-fam-2.56.1-9.amzn2.0.3.aarch64  
    glib2-static-2.56.1-9.amzn2.0.3.aarch64  
    glib2-tests-2.56.1-9.amzn2.0.3.aarch64  
    glib2-debuginfo-2.56.1-9.amzn2.0.3.aarch64  
  
i686:  
    glib2-2.56.1-9.amzn2.0.3.i686  
    glib2-devel-2.56.1-9.amzn2.0.3.i686  
    glib2-fam-2.56.1-9.amzn2.0.3.i686  
    glib2-static-2.56.1-9.amzn2.0.3.i686  
    glib2-tests-2.56.1-9.amzn2.0.3.i686  
    glib2-debuginfo-2.56.1-9.amzn2.0.3.i686  
  
noarch:  
    glib2-doc-2.56.1-9.amzn2.0.3.noarch  
  
src:  
    glib2-2.56.1-9.amzn2.0.3.src  
  
x86_64:  
    glib2-2.56.1-9.amzn2.0.3.x86_64  
    glib2-devel-2.56.1-9.amzn2.0.3.x86_64  
    glib2-fam-2.56.1-9.amzn2.0.3.x86_64  
    glib2-static-2.56.1-9.amzn2.0.3.x86_64  
    glib2-tests-2.56.1-9.amzn2.0.3.x86_64  
    glib2-debuginfo-2.56.1-9.amzn2.0.3.x86_64

Additional References

Red Hat: CVE-2018-16428, CVE-2018-16429

Mitre: CVE-2018-16428, CVE-2018-16429

OSVersionArchitecturePackageVersionFilename
Amazon Linux2aarch64glib2< 2.56.1-9.amzn2.0.3glib2-2.56.1-9.amzn2.0.3.aarch64.rpm
Amazon Linux2aarch64glib2-devel< 2.56.1-9.amzn2.0.3glib2-devel-2.56.1-9.amzn2.0.3.aarch64.rpm
Amazon Linux2aarch64glib2-fam< 2.56.1-9.amzn2.0.3glib2-fam-2.56.1-9.amzn2.0.3.aarch64.rpm
Amazon Linux2aarch64glib2-static< 2.56.1-9.amzn2.0.3glib2-static-2.56.1-9.amzn2.0.3.aarch64.rpm
Amazon Linux2aarch64glib2-tests< 2.56.1-9.amzn2.0.3glib2-tests-2.56.1-9.amzn2.0.3.aarch64.rpm
Amazon Linux2aarch64glib2-debuginfo< 2.56.1-9.amzn2.0.3glib2-debuginfo-2.56.1-9.amzn2.0.3.aarch64.rpm
Amazon Linux2i686glib2< 2.56.1-9.amzn2.0.3glib2-2.56.1-9.amzn2.0.3.i686.rpm
Amazon Linux2i686glib2-devel< 2.56.1-9.amzn2.0.3glib2-devel-2.56.1-9.amzn2.0.3.i686.rpm
Amazon Linux2i686glib2-fam< 2.56.1-9.amzn2.0.3glib2-fam-2.56.1-9.amzn2.0.3.i686.rpm
Amazon Linux2i686glib2-static< 2.56.1-9.amzn2.0.3glib2-static-2.56.1-9.amzn2.0.3.i686.rpm
Rows per page:
1-10 of 191

Related

nessus 20
ubuntu 2
suse 1
mageia 1
openvas 17
cloudfoundry 1
osv 3
photon 3
fedora 3
debian 1
veracode 1
prion 2
cve 2
ubuntucve 2
ibm 7
redhatcve 2
debiancve 2
amazon 2
nessus
nessus
openSUSE Security Update : glib2 (openSUSE-2018-1485)
2018-12-07 00:00:00
SUSE SLED15 / SLES15 Security Update : glib2 (SUSE-SU-2018:3913-1)
2019-01-02 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : GLib vulnerabilities (USN-3767-1)
2023-10-20 00:00:00
ubuntu
ubuntu
GLib vulnerabilities
2018-09-19 00:00:00
GLib vulnerabilities
2018-09-19 00:00:00
suse
suse
Security update for glib2 (moderate)
2018-12-07 12:24:54
mageia
mageia
Updated glib2.0 packages fix security vulnerabilities
2018-10-19 21:00:37
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:3913-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for glib2 (openSUSE-SU-2018:4005-1)
2018-12-10 00:00:00
Ubuntu: Security Advisory (USN-3767-1)
2018-10-26 00:00:00
cloudfoundry
cloudfoundry
USN-3767-1: GLib vulnerabilities | Cloud Foundry
2018-09-27 00:00:00
osv
osv
glib2.0 - security update
2019-07-31 00:00:00
CVE-2018-16429
2018-09-04 00:29:01
CVE-2018-16428
2018-09-04 00:29:01
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0194
2018-11-07 00:00:00
Critical Photon OS Security Update - PHSA-2018-0194
2018-11-07 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0108
2018-11-08 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: chromium-69.0.3497.100-1.fc28
2018-10-14 23:43:01
[SECURITY] Fedora 27 Update: chromium-69.0.3497.100-1.fc27
2018-11-11 02:40:37
[SECURITY] Fedora 29 Update: chromium-69.0.3497.100-1.fc29
2018-10-30 17:43:16
debian
debian
[SECURITY] [DLA 1866-1] glib2.0 security update
2019-07-31 18:51:21
veracode
veracode
Denial Of Service (DoS)
2021-06-30 08:18:02
prion
prion
Null pointer dereference
2018-09-04 00:29:00
Out-of-bounds
2018-09-04 00:29:00
cve
cve
CVE-2018-16429
2018-09-04 00:29:00
CVE-2018-16428
2018-09-04 00:29:00
ubuntucve
ubuntucve
CVE-2018-16429
2018-09-03 00:00:00
CVE-2018-16428
2018-09-03 00:00:00
ibm
ibm
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerability in glib2 (CVE-2018-16429)
2020-01-09 19:02:54
Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerability GNU C Library (CVE-2018-16429)
2023-12-07 22:45:02
Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in glib2, libxml2 and ntp
2023-12-07 22:45:04
redhatcve
redhatcve
CVE-2018-16428
2020-03-31 08:43:42
CVE-2018-16429
2019-10-24 18:12:42
debiancve
debiancve
CVE-2018-16428
2018-09-04 00:29:00
CVE-2018-16429
2018-09-04 00:29:00
amazon
amazon
Important: glib2
2023-05-11 18:00:00
Important: glib2
2023-04-27 16:19:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.032 Low

EPSS

Percentile

91.1%

JSON
Related for ALAS2-2023-2049
nessus20ubuntu2suse1mageia1openvas17cloudfoundry1osv3photon3fedora3debian1veracode1prion2cve2ubuntucve2ibm7redhatcve2debiancve2amazon2