Linux Distros Unpatched Vulnerability : CVE-2023-32636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolv...

Linux Distros Unpatched Vulnerability : CVE-2023-32665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading...

Linux Distros Unpatched Vulnerability : CVE-2012-0039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLib 2.31.8 and earlier, when the gstrhash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which...

Linux Distros Unpatched Vulnerability : CVE-2019-13012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The keyfile settings backend in GNOME GLib aka glib2.0 before 2.60.0 creates directories using gfilemakedirectorywithparents kfsb-dir, NULL, NULL and files usin...

Linux Distros Unpatched Vulnerability : CVE-2018-16428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNOME GLib 2.56.1, gmarkupparsecontextendparse in gmarkup.c has a NULL pointer dereference. CVE-2018-16428 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2018-16429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in gmarkupparsecontextparse in gmarkup.c, related to utf8str. CVE-2018-16429 Note that Nessus relies o...

Amazon Linux 2 : glib2 (ALAS-2025-2767)

The version of glib2 installed on the remote host is prior to 2.56.1-9. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2767 advisory. GLib's GVariant deserialization prior to GLib 2.74.4 failed to validate the input conforms to the expected format, leading ...

A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665.

...

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.

...

CBL Mariner 2.0 Security Update: glib (CVE-2023-32636)

The version of glib installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-32636 advisory. - A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service...

CBL Mariner 2.0 Security Update: glib (CVE-2023-32643)

The version of glib installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-32643 advisory. - A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced...

Important: glib2

Issue Overview: GLib's GVariant deserialization prior to GLib 2.74.4 failed to validate the input conforms to the expected format, leading to denial of service. CVE-2023-29499 GLib's GVariant deserialization prior to GLib 2.74.4 is vulnerable to a slowdown issue where a crafted GVariant can cause...

CBL Mariner 2.0 Security Update: glib (CVE-2023-29499)

The version of glib installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-29499 advisory. - A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected...

CVE-2023-32643 affecting package glib for versions less than 2.71.0-4

CVE-2023-32643 affecting package glib for versions less than 2.71.0-4. A patched version of the package is available...

CVE-2023-32636 affecting package glib for versions less than 2.71.0-4

CVE-2023-32636 affecting package glib for versions less than 2.71.0-4. A patched version of the package is available...

CVE-2023-29499 affecting package glib for versions less than 2.71.0-4

CVE-2023-29499 affecting package glib for versions less than 2.71.0-4. A patched version of the package is available...

EulerOS 2.0 SP11 : glib2 (EulerOS-SA-2025-1156)

According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for...

EulerOS 2.0 SP12 : glib2 (EulerOS-SA-2025-1189)

According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for...

Azure Linux 3.0 Security Update: glib (CVE-2024-52533)

The version of glib installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52533 advisory. - gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because...

EulerOS 2.0 SP12 : glib2 (EulerOS-SA-2025-1173)

According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for...