233 matches found
AZL-40403 CVE-2024-34397 affecting package glib for versions less than 2.71.0-7
An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...
GNOME GLib 安全漏洞
GNOME GLib is a multi-platform toolkit for creating graphical user interfaces, and is the underlying core library that underpins GTK+ and GNOME projects. A security vulnerability exists in GNOME GLib versions prior to 2.78.5 and prior to 2.80.1, which stems from the vulnerability of GDBus signali...
ROS-20240506-02
A vulnerability in the Glib library is related to GVariant deserialization. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability of Glib library function gbytearraynewtake is related to buffer copying without checking the the size of the input data...
glib: Timeout in fuzz_variant_text
A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect gli...
The vulnerability of the is_normal() function in the Glib library allows a attacker to cause a service failure.
The vulnerability of the isnormal function in the Glib library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Glib library, related to the restoration of unreliable data in memory, allows a hacker to cause a service failure.
The vulnerability of the Glib library relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the g_variant_byteswap() function in the Glib library, which allows a hacker to cause a service failure.
The vulnerability of the gvariantbyteswap function in the Glib library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...
CLSA-2023-1697741849 Fix of 5 CVEs
SECURITY UPDATE: GVariant security issues - debian/patches/CVE-2023-29499-x-CVE-2023-32665/.patch: fix multiple GVariant serialization issues - CVE-2023-29499, CVE-2023-32611, CVE-2023-32636, CVE-2023-32643, CVE-2023-32665 debian/patches/fix-gtestbug-assertion.patch: Fix gtestbug assertion in...
CLSA-2023-1697740947 glib2: Fix of 5 CVEs
Enable internal tests - Skip several failed tests from the check - CVE-2023-29499: Fix GVariant offset table entry size which is not checked in isnormal - CVE-2023-32611: Fix an issue where gvariantbyteswap can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant...
CLSA-2023-1697740212 glib2: Fix of 5 CVEs
Enable internal tests - Skip several failed tests from the check - CVE-2023-29499: Fix GVariant offset table entry size which is not checked in isnormal - CVE-2023-32611: Fix an issue where gvariantbyteswap can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant...
CLSA-2023-1696352100 glib2: Fix of CVE-2021-27218
CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check...
AZL-28778 CVE-2023-32636 affecting package glib for versions less than 2.71.0-4
A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect gli...
DEBIAN-CVE-2023-32611
A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service...
AZL-28774 CVE-2023-32611 affecting package glib for versions less than 2.71.0-4
A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service...
glib2 资源管理错误漏洞
glib2 is a general-purpose, portable utility library for the GNOME project. It provides many useful data types, macros, type conversions, string utilities, file utilities, main loop abstractions, and more. A resource management error vulnerability exists in glib2, which stems from a timeout due t...
glib2 资源管理错误漏洞
glib2 is a general-purpose, portable utility library for the GNOME project. It provides many useful data types, macros, type conversions, string utilities, file utilities, main loop abstractions, and more. A security vulnerability exists in glib2, which stems from the fact that gvariantbyteswap m...
UBUNTU-CVE-2023-32636
A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect gli...
UBUNTU-CVE-2023-32665
A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service...
PT-2023-9104 · Glib +6 · Glib +6
Name of the Vulnerable Software and Affected Versions: Glib affected versions not specified Description: The issue is related to uncontrolled resource consumption in the Glib library. It may allow an attacker to cause a denial of service. Recommendations: At the moment, there is no information...