Amazon Linux 2 : glib2 (ALAS-2025-2767)

The version of glib2 installed on the remote host is prior to 2.56.1-9. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2767 advisory. GLib's GVariant deserialization prior to GLib 2.74.4 failed to validate the input conforms to the expected format, leading ...

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.

...

A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665.

...

CBL Mariner 2.0 Security Update: glib (CVE-2023-29499)

The version of glib installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-29499 advisory. - A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected...

Important: glib2

Issue Overview: GLib's GVariant deserialization prior to GLib 2.74.4 failed to validate the input conforms to the expected format, leading to denial of service. CVE-2023-29499 GLib's GVariant deserialization prior to GLib 2.74.4 is vulnerable to a slowdown issue where a crafted GVariant can cause...

CBL Mariner 2.0 Security Update: glib (CVE-2023-32643)

The version of glib installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-32643 advisory. - A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced...

CBL Mariner 2.0 Security Update: glib (CVE-2023-32636)

The version of glib installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-32636 advisory. - A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service...

CVE-2023-29499 affecting package glib for versions less than 2.71.0-4

CVE-2023-29499 affecting package glib for versions less than 2.71.0-4. A patched version of the package is available...

CVE-2023-32636 affecting package glib for versions less than 2.71.0-4

CVE-2023-32636 affecting package glib for versions less than 2.71.0-4. A patched version of the package is available...

CVE-2023-32643 affecting package glib for versions less than 2.71.0-4

CVE-2023-32643 affecting package glib for versions less than 2.71.0-4. A patched version of the package is available...

Astra Linux – Vulnerability in glib2.0

The gio/gsocks4aproxy.c file in GNOME GLib before version 2.82.1 contains an off-by-one error, leading to a buffer overflow. This issue arises because the SOCKS4CONNMSGLEN field is not sufficient to include a trailing '\0' character...

EulerOS 2.0 SP11 : glib2 (EulerOS-SA-2025-1156)

According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for...

Azure Linux 3.0 Security Update: glib (CVE-2024-52533)

The version of glib installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52533 advisory. - gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because...

EulerOS 2.0 SP11 : glib2 (EulerOS-SA-2025-1137)

According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for...

EulerOS 2.0 SP12 : glib2 (EulerOS-SA-2025-1173)

According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for...

EulerOS 2.0 SP12 : glib2 (EulerOS-SA-2025-1189)

According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for...

CLSA-2025-1738833732 glib2: Fix of CVE-2024-52533

CVE-2024-52533: Fix off-by-one error in gsocks4aproxy.c to prevent buffer overflow caused by insufficient length of SOCKS4CONNMSGLEN...

Security Bulletin: Vulnerability in GNOME GLibl affects IBM watsonx Assistant for IBM Cloud Pak for Data

Summary A potential vulnerability in GNOME GLib has been identified that affects IBM watsonx Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-34397 DESCRIPTION: GNOME GLib could allow a...

Moderate: Red Hat Security Advisory: mingw-glib2 security update

An update for mingw-glib2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

glib: buffer overflow in set_connect_msg()

A flaw was found in the Glib library. A buffer overflow condition can be triggered in certain conditions due to an off-by-one error in SOCKS4CONNMSGLEN. This issue may lead to an application crash or other undefined behavior...