2054 matches found
The vulnerability of the is_normal() function in the Glib library allows a attacker to cause a service failure.
The vulnerability of the isnormal function in the Glib library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
glib: g_variant_byteswap() can take a long time with some non-normal inputs
A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service...
glib: GVariant deserialisation does not match spec for non-normal data
A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service...
glib: GVariant offset table entry size is not checked in is_normal()
A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service...
RHEL 9 : glib2 (RHSA-2023:6631)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6631 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...
Low: glib2 security and bug fix update
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: GVariant offset table...
Important Photon OS Security Update - PHSA-2023-4.0-0500
Updates of 'glib' packages of Photon OS have been released...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : GLib vulnerabilities (USN-3767-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3767-1 advisory. It was discovered that GLib incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of...
Ubuntu: Security Advisory (USN-6165-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CLSA-2023-1697741849 Fix of 5 CVEs
SECURITY UPDATE: GVariant security issues - debian/patches/CVE-2023-29499-x-CVE-2023-32665/.patch: fix multiple GVariant serialization issues - CVE-2023-29499, CVE-2023-32611, CVE-2023-32636, CVE-2023-32643, CVE-2023-32665 debian/patches/fix-gtestbug-assertion.patch: Fix gtestbug assertion in...
CLSA-2023-1697740947 glib2: Fix of 5 CVEs
Enable internal tests - Skip several failed tests from the check - CVE-2023-29499: Fix GVariant offset table entry size which is not checked in isnormal - CVE-2023-32611: Fix an issue where gvariantbyteswap can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant...
CLSA-2023-1697740212 glib2: Fix of 5 CVEs
Enable internal tests - Skip several failed tests from the check - CVE-2023-29499: Fix GVariant offset table entry size which is not checked in isnormal - CVE-2023-32611: Fix an issue where gvariantbyteswap can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant...
USN-6165-2: GLib vulnerabilities
USN-6165-1 fixed vulnerabilities in GLib. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that GLib incorrectly handled non-normal GVariants. An attacker could use this issue to cause GLib to...
USN-6165-2 glib2.0 vulnerabilities
USN-6165-1 fixed vulnerabilities in GLib. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that GLib incorrectly handled non-normal GVariants. An attacker could use this issue to cause GLib to...
Ubuntu 16.04 ESM / 18.04 ESM : GLib vulnerabilities (USN-6165-2)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6165-2 advisory. USN-6165-1 fixed vulnerabilities in GLib. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu...
CLSA-2023-1696352100 glib2: Fix of CVE-2021-27218
CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check...
Debian: Security Advisory (DLA-3583-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3583-1] glib2.0 security update
Debian LTS Advisory DLA-3583-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón September 25, 2023 https://wiki.debian.org/LTS Package : glib2.0 Version : 2.58.3-2+deb10u5 CVE ID : CVE-2023-29499 CVE-2023-32611 CVE-2023-32665 Several security vulnerabilities...
CVE-2023-32636
A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect gli...