PT-2021-1988 · Glib +10 · Glib +10

Name of the Vulnerable Software and Affected Versions: GLib versions prior to 2.66.7 GLib versions 2.67.x prior to 2.67.4 Description: The issue is related to the function g byte array new take in the GLib library, which is associated with the copying of a buffer without checking the size of the...

AZL-6435 CVE-2020-35457 affecting package glib for versions less than 2.60.1-5

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of...

Vulnerability of the functions g_file_make_directory_with_parents and g_file_replace_contents in the Glib library, which allows attackers to escalate their privileges and gain access to files.

The vulnerability of the gfilemakedirectorywithparents and gfilereplacecontents functions in the Glib library is related to improper handling of permissions. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain access to files...

The vulnerability of the file_copy_fallback() function in the Glib library allows a hacker to gain unauthorized access to protected information.

The vulnerability of the filecopyfallback function in the Glib library is related to incorrect handling of permissions. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

USN-4049-4 glib2.0 regression

USN-4049-1 fixed a vulnerability in GLib. The update introduced a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that GLib created directories and files without properly restricting permissions. An attacker could possibl...

The vulnerability of the g_markup_parse_context_parse function in the Glib library allows a hacker to trigger a service failure.

The vulnerability of the gmarkupparsecontextparse function gmarkup.c, method utf8str in the Glib library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

AZL-6434 CVE-2019-12450 affecting package glib for versions less than 2.60.1-5

filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used...

cockpit: Crash when parsing invalid base64 headers

It was found that cockpit used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash...

DEBIAN-CVE-2018-16428

In GNOME GLib 2.56.1, gmarkupparsecontextendparse in gmarkup.c has a NULL pointer dereference...

UBUNTU-CVE-2016-6855

Eye of GNOME aka eog 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service out-of-bounds write and crash via vectors involving passing invalid UTF-8 to GMarkup...

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libglib-20-0 package of the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dbus-glib-devel-0.73 package in the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libglib-20-0-32bit package of the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

UBUNTU-CVE-2012-0039

GLib 2.31.8 and earlier, when the gstrhash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash...

glib library privilege escalation

gfilecopy function sets symbolic link's permission if source file is copied by symbolic link...

glib library memory corruption

Memory corruption on base64 encoding/decoding...

Fedora Update for glib2 FEDORA-2008-6025

Check for the Version of glib2 OpenVAS Vulnerability Test Fedora Update for glib2 FEDORA-2008-6025 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...