An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based client behaving incorrectly, with an application-dependent impact.
CVSS Details
- CVSS 3.1 Base Score: 5.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw64-glib2Upgrade mingw64-glib2-staticUpgrade glib2-docUpgrade glib2Upgrade mingw32-glib2Upgrade glib2-staticUpgrade glib2-develUpgrade mingw32-glib2-staticUpgrade glib2-famUpgrade glib2-tests | Sep 12, 2024 | May 7, 2024 |
| Alpine Linux | — | Upgrade glib | Aug 22, 2024 | May 7, 2024 |
| Debian | — | Upgrade glib2.0 | May 10, 2024 | May 7, 2024 |
| Gentoo Linux | — | Upgrade dev-libs/glib. | Jun 24, 2024 | May 7, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade glib2 | May 13, 2025 | May 7, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade glib2 | Oct 9, 2024 | May 7, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade glib2 | Oct 9, 2024 | May 7, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade glib2-docUpgrade glib2-testsUpgrade mingw32-glib2Upgrade glib2-develUpgrade glib2-famUpgrade glib2-staticUpgrade mingw64-glib2Upgrade glib2Upgrade mingw64-glib2-staticUpgrade mingw32-glib2-static | Oct 16, 2024 | May 7, 2024 |
| Redhat_linux | — | Upgrade glib2-staticUpgrade mingw32-glib2-staticUpgrade mingw64-glib2Upgrade glib2-devel-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2-famUpgrade glib2-develUpgrade mingw32-glib2Upgrade glib2-debuginfoUpgrade glib2-testsUpgrade mingw64-glib2-debuginfoUpgrade mingw64-glib2-staticUpgrade glib2-debugsourceUpgrade mingw32-glib2-debuginfoUpgrade glib2Upgrade glib2-fam-debuginfoUpgrade glib2-docNo solution exists | Sep 10, 2024 | May 7, 2024 |
| Rocky_linux | — | Upgrade glib2-debuginfoUpgrade glib2-fam-debuginfoUpgrade glib2-testsUpgrade glib2-debugsourceUpgrade glib2Upgrade glib2-staticUpgrade glib2-tests-debuginfoUpgrade glib2-famUpgrade glib2-devel-debuginfoUpgrade glib2-devel | Sep 17, 2024 | May 7, 2024 |
| Suse | — | Upgrade typelib-1_0-Gio-2_0Upgrade typelib-1_0-GIRepository-3_0Upgrade gio-branding-upstreamUpgrade glib2-langUpgrade libgio-2_0-0-32bitUpgrade glib2-tests-develUpgrade libgio-2_0-0Upgrade libgmodule-2_0-0-32bitUpgrade libglib-2_0-0Upgrade glib2-devel-32bitUpgrade libgmodule-2_0-0Upgrade typelib-1_0-GLibUnix-2_0Upgrade libgobject-2_0-0Upgrade libgirepository-2_0-0Upgrade glib2-develUpgrade glib2-tools-32bitUpgrade typelib-1_0-GModule-2_0Upgrade gio-branding-SLEUpgrade libgthread-2_0-0Upgrade glib2-docUpgrade libglib-2_0-0-32bitUpgrade glib2-devel-staticUpgrade typelib-1_0-GObject-2_0Upgrade typelib-1_0-GLib-2_0Upgrade libgthread-2_0-0-32bitUpgrade glib2-toolsUpgrade libgobject-2_0-0-32bitUpgrade libgio-fam | May 30, 2024 | May 7, 2024 |
| Ubuntu | — | Upgrade libglib2.0-binUpgrade libglib2.0-0t64Upgrade libglib2.0-0 | May 17, 2024 | May 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub