GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so because the proxy_addr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest security relevance is in use cases where a proxy is used to help with privacy/anonymity even though there is no technical barrier to a direct connection. NOTE: versions before 2.60 are unaffected.

🗓️ 16 Dec 2021 08:00:00Reported by MicrosoftType

GSocketClient in GNOME GLib may bypass the proxy due to proxy_addr mishandling; timing dependent.

Reporter	Title	Published	Views	Family All 33
AlpineLinux	CVE-2020-6750	9 Jan 202019:23	–	alpinelinux
CBLMariner	CVE-2020-6750 affecting package glib for versions less than 2.71.0-1	9 Apr 202206:51	–	cbl_mariner
CNVD	GNOME Glib Information Disclosure Vulnerability	17 Feb 202000:00	–	cnvd
CVE	CVE-2020-6750	9 Jan 202019:23	–	cve
Cvelist	CVE-2020-6750	9 Jan 202019:23	–	cvelist
Debian CVE	CVE-2020-6750	9 Jan 202019:23	–	debiancve
EUVD	EUVD-2020-27897	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 30 Update: glib2-2.60.7-3.fc30	23 Feb 202001:09	–	fedora
Fedora	[SECURITY] Fedora 31 Update: glib2-2.62.4-2.fc31	10 Feb 202001:43	–	fedora
Fedora	[SECURITY] Fedora 31 Update: mingw-glib2-2.62.4-2.fc31	20 Feb 202005:05	–	fedora