135 matches found
K70949911: Glib vulnerability CVE-2019-14822
Security Advisory Description A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrok...
SUSE CVE-2016-6855
Eye of GNOME aka eog 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service out-of-bounds write and crash via vectors involving passing invalid UTF-8 to GMarkup...
SUSE CVE-2019-9633
gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service gsocketclientconnectedcallback mishandling and application crash via a crafted web sit...
CVE-2021-3800
A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition...
Ubuntu 16.04 ESM / 18.04 LTS : GLib vulnerability (USN-5189-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5189-1 advisory. It was discovered that GLib incorrectly handled certain environment variables. An attacker could possibly use this issue to escalate privileges. Tenab...
glib: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink
An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...
CVE-2021-3800
A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition...
Denial Of Service (DoS)
glib is vulnerable to denial of service. A NULL pointer dereference in gmarkupparsecontextendparse in gmarkup.c allows an attacker to crash the application...
USN-4764-1: GLib vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that GLib incorrectly handled certain symlinks when replacing files. If a user or automated system were tricked into extracting a specially crafted file with File...
MGASA-2021-0162 Updated glib2.0 packages fix security vulnerability
An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...
USN-4764-1 glib2.0 vulnerability
It was discovered that GLib incorrectly handled certain symlinks when replacing files. If a user or automated system were tricked into extracting a specially crafted file with File Roller, a remote attacker could possibly create files outside of the intended directory...
GNOME Glib Buffer Overflow Vulnerability
GNOME Glib is a multi-platform toolkit for creating graphical user interfaces, and is the underlying core library that underlies GTK+ and GNOME projects. A buffer overflow vulnerability exists in GNOME GLib, which originates when a networked system or product performs an operation in memory witho...
DEBIAN-CVE-2021-27218
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If gbytearraynewtake was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 232, causing unintended length truncation...
The vulnerability of the g_bytes_new function in the gbytes.c component of the Glib library allows a hacker to modify the contents of dynamic memory.
The vulnerability of the gbytesnew function in the gbytes.c component of the Glib library arises from a numerical overflow due to an implicit conversion of the gsize type variable to the guint type. Exploiting this vulnerability could allow an attacker to modify dynamic memory contents by using a...
Ubuntu: Security Advisory (USN-4049-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS : GLib vulnerability (USN-4049-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4049-1 advisory. It was discovered that GLib created directories and files without properly restricting permissions. An attacker could possibly use this issue to acces...
USN-4049-1 glib2.0 vulnerability
It was discovered that GLib created directories and files without properly restricting permissions. An attacker could possibly use this issue to access sensitive information...
Ubuntu 14.04 LTS : glib2.0 vulnerability (USN-4014-2)
USN-4014-1 fixed a vulnerability in GLib. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details : It was discovered that GLib incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information...
USN-4014-2: GLib vulnerability
USN-4014-1 fixed a vulnerability in GLib. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that GLib incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information...