Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either (1) from or (2) to a base64 representation.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade glib2.0 | Jul 30, 2024 | Mar 14, 2009 |
| Gentoo Linux | — | Upgrade dev-libs/glib. | Oct 30, 2017 | Mar 14, 2009 |
| Oracle_linux | — | Upgrade glib2-develUpgrade glib2 | Oct 16, 2024 | Mar 14, 2009 |
| Suse | — | Upgrade glib2-develUpgrade typelib-1_0-Gio-2_0Upgrade typelib-1_0-GModule-2_0Upgrade libglib-2_0-0Upgrade typelib-1_0-GLibUnix-2_0Upgrade libgobject-2_0-0-32bitUpgrade glib2-langUpgrade glib2-toolsUpgrade libgio-2_0-0-x86Upgrade libgirepository-2_0-0Upgrade libgmodule-2_0-0-x86Upgrade libgio-famUpgrade libgobject-2_0-0-x86Upgrade typelib-1_0-GIRepository-3_0Upgrade libgobject-2_0-0Upgrade libgio-2_0-0Upgrade glib2-devel-staticUpgrade glib2Upgrade typelib-1_0-GLib-2_0Upgrade libgthread-2_0-0-x86Upgrade libgmodule-2_0-0-32bitUpgrade libgthread-2_0-0Upgrade libgio-2_0-0-32bitUpgrade libgthread-2_0-0-32bitUpgrade libglib-2_0-0-32bitUpgrade glib2-docUpgrade glib2-devel-32bitUpgrade libgmodule-2_0-0Upgrade libglib-2_0-0-x86Upgrade typelib-1_0-GObject-2_0 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libglib2.0-0Upgrade libglib2.0-udeb | Nov 8, 2024 | Mar 14, 2009 |
| Vmsa 2010 0004 2 Vma And Service Console Package Glib2 | — | Upgrade VMware ESX 4.0 to build number 236512 | Aug 31, 2010 | Mar 14, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub