The vulnerability of the Glib library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Glib library is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause a service failure...

Fedora 39 : mingw-glib2 (2024-be032e564d)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-be032e564d advisory. Update glib2 to fix CVE-2024-34397. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

Debian dla-3814 : libglib2.0-0 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3814 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3814-1 [email protected] https://www.debian.org/lts/security/...

Fedora 39 : glib2 / gnome-shell (2024-fd2569c4e9)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-fd2569c4e9 advisory. Resolve CVE-2024-34397 GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing, and also update gnome-shell to ensure this fix doe...

[SECURITY] [DLA 3814-1] glib2.0 security update

Debian LTS Advisory DLA-3814-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 13, 2024 https://wiki.debian.org/LTS Package : glib2.0 Version : 2.58.3-2+deb10u6 CVE ID : CVE-2024-34397 Alicia Boya Garcia reported that the GDBus signal subscriptions in the GLib...

Fedora 40 : glib2 / gnome-shell (2024-635a54eb7e)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-635a54eb7e advisory. Resolve CVE-2024-34397 GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing, and also update gnome-shell to ensure this fix doe...

RHEL 7 : glib (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - glib: gfilereplace with GFILECREATEREPLACEDESTINATION creates empty target for dangling symlink...

RHEL 6 : glib2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - glib2: filecopyfallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a...

RHEL 6 : glib (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - glib: gfilereplace with GFILECREATEREPLACEDESTINATION creates empty target for dangling symlink...

USN-6768-1: GLib vulnerability

Alicia Boya García discovered that GLib incorrectly handled signal subscriptions. A local attacker could use this issue to spoof D-Bus signals resulting in a variety of impacts including possible privilege escalation...

USN-6768-1 glib2.0 vulnerability

Alicia Boya García discovered that GLib incorrectly handled signal subscriptions. A local attacker could use this issue to spoof D-Bus signals resulting in a variety of impacts including possible privilege escalation...

SUSE CVE-2024-34397

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...

Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : GLib vulnerability (USN-6768-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6768-1 advisory. Alicia Boya Garca discovered that GLib incorrectly handled signal subscriptions. A local attacker could use this issue to spoof...

CVE-2024-34397

A flaw was found in GNOME GLib. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the...

CVE-2024-34397

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...

DEBIAN-CVE-2024-34397

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...

AZL-40400 CVE-2024-34397 affecting package glib for versions less than 2.78.6-1

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...

ALPINE-CVE-2024-34397

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...

AZL-40403 CVE-2024-34397 affecting package glib for versions less than 2.71.0-7

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...

CVE-2024-34397

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...