AZL-28778 CVE-2023-32636 affecting package glib for versions less than 2.71.0-4

🗓️ 14 Sep 2023 20:15:09Reported by GoogleType

osv

osv🔗 osv.dev

GLib gvariant deserialization denial of service for versions below 2.71.0-4 after backported CVE-2023-29499 fix.

Reporter	Title	Published	Views	Family All 91
IBM Security Bulletins	Security Bulletin: There is a vulnerability in Findings in glib2 library affecting watsonx Code Assistant On Prem Extensions	27 Mar 202515:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataStage on Cloud Pak for Data is vulnerable to denial of service due to GNOME GLib (CVE-2023-32636)	13 Mar 202523:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple CVEs may affect Operating System packages shipped with IBM CICS TX Advanced 10.1	4 Sep 202311:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	6 Aug 202516:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.3 addresses multiple security vulnerabilities	26 Mar 202504:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.	26 May 202606:40	–	ibm
Tenable Nessus	Amazon Linux 2 : glib2 (ALAS-2025-2767)	26 Feb 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : glib2 (EulerOS-SA-2023-2582)	8 Aug 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : glib2 (EulerOS-SA-2023-2612)	8 Aug 202300:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.1 : glib2 (EulerOS-SA-2023-2956)	16 Jan 202400:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-32636

21 Apr 2026 04:25Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.00774

glib library gvariant deserialization denial of service versions below 2.71.0-4 backported fix CVE-2023-29499