An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw32-glib2-staticUpgrade glib2-staticUpgrade mingw64-glib2-staticUpgrade glib2-docUpgrade mingw64-glib2Upgrade mingw32-glib2 | May 4, 2022 | Feb 15, 2021 |
| Alpine Linux | — | Upgrade glib | Mar 26, 2024 | Feb 15, 2021 |
| Amazon Linux Ami 2 | — | Upgrade glib2-testsUpgrade glib2-debuginfoUpgrade glib2-staticUpgrade glib2-famUpgrade glib2Upgrade glib2-develUpgrade glib2-doc | Jun 24, 2021 | Feb 15, 2021 |
| Amazon_linux | — | Upgrade glib2 | Sep 9, 2021 | Feb 15, 2021 |
| Centos_linux | — | Upgrade glib2-develUpgrade glib2-debuginfoUpgrade glib2-testsUpgrade glib2-docUpgrade glib2-debugsourceUpgrade glib2-staticUpgrade glib2-fam-debuginfoUpgrade glib2Upgrade glib2-devel-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2-fam | Jun 1, 2021 | Feb 15, 2021 |
| Debian | — | Upgrade glib2.0 | Jun 8, 2022 | Feb 15, 2021 |
| Gentoo Linux | — | Upgrade dev-libs/glib. | Jul 8, 2021 | Feb 15, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glib2Upgrade glib2-devel | Sep 16, 2021 | Feb 15, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glib2Upgrade glib2-devel | Apr 30, 2021 | Feb 15, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glib2Upgrade glib2-devel | May 19, 2021 | Feb 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade glib2-develUpgrade glib2Upgrade glib2-fam | May 18, 2021 | Feb 15, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade glib2 | Jun 2, 2021 | Feb 15, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 24, 2022 |
| Oracle Solaris | — | Upgrade library/glib2 to version 2.66.7-11.4.32.0.1.88.2 on Solaris 11.4Upgrade library/libmozjs-60 to version 60.8.0-11.4.32.0.1.88.2 on Solaris 11.4 | Apr 21, 2021 | Feb 15, 2021 |
| Oracle_linux | — | Upgrade glib2-famUpgrade glib2-staticUpgrade glib2-testsUpgrade glib2-develUpgrade glib2-docUpgrade glib2 | Jun 1, 2021 | Feb 4, 2021 |
| Redhat_linux | — | Upgrade mingw64-glib2Upgrade mingw32-glib2-debuginfoUpgrade glib2-testsUpgrade glib2-docUpgrade glib2-debuginfoUpgrade glib2-staticUpgrade glib2Upgrade mingw64-glib2-staticUpgrade glib2-famUpgrade mingw32-glib2Upgrade glib2-tests-debuginfoUpgrade glib2-fam-debuginfoUpgrade mingw64-glib2-debuginfoUpgrade mingw32-glib2-staticUpgrade glib2-devel-debuginfoUpgrade glib2-develUpgrade glib2-debugsource | Jun 1, 2021 | Feb 15, 2021 |
| Rocky_linux | — | Upgrade glib2-fam-debuginfoUpgrade glib2-staticUpgrade glib2-develUpgrade glib2-devel-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2-testsUpgrade glib2-debugsourceUpgrade glib2-debuginfoUpgrade glib2Upgrade glib2-fam | May 5, 2022 | Feb 15, 2021 |
| Suse | — | Upgrade libgio-fam-32bitUpgrade glib2-devel-staticUpgrade glib2-langUpgrade libgobject-2_0-0Upgrade glib2-toolsUpgrade glib2-develUpgrade libglib-2_0-0Upgrade libgthread-2_0-0-32bitUpgrade libglib-2_0-0-32bitUpgrade libgmodule-2_0-0-32bitUpgrade glib2-testsUpgrade glib2-devel-32bitUpgrade libgthread-2_0-0Upgrade gio-branding-upstreamUpgrade libgio-famUpgrade libgobject-2_0-0-32bitUpgrade libgio-2_0-0Upgrade libgmodule-2_0-0Upgrade libgio-2_0-0-32bitUpgrade glib2-tools-32bit | Mar 16, 2021 | Feb 15, 2021 |
| Ubuntu | — | Upgrade libglib2.0-0 | Mar 9, 2021 | Feb 15, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub