A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glib2-staticUpgrade glib2-doc | May 4, 2022 | Nov 9, 2021 |
| Amazon Linux Ami 2 | — | Upgrade glib2Upgrade glib2-testsUpgrade glib2-docUpgrade glib2-debuginfoUpgrade glib2-develUpgrade glib2-famUpgrade glib2-static | Jun 6, 2023 | Aug 23, 2022 |
| Amazon_linux | — | Upgrade glib2 | May 4, 2023 | Nov 16, 2021 |
| Centos_linux | — | Upgrade glib2-testsUpgrade glib2-debuginfoUpgrade glib2-develUpgrade glib2-tests-debuginfoUpgrade glib2-fam-debuginfoUpgrade glib2-famUpgrade glib2-debugsourceUpgrade glib2-devel-debuginfoUpgrade glib2 | Nov 10, 2021 | Nov 9, 2021 |
| Debian | — | Upgrade glib2.0 | Sep 19, 2022 | Aug 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glib2-develUpgrade glib2 | Mar 9, 2023 | Aug 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade glib2-famUpgrade glib2-develUpgrade glib2 | Feb 9, 2023 | Aug 23, 2022 |
| Oracle_linux | — | Upgrade glib2-develUpgrade glib2Upgrade glib2-famUpgrade glib2-staticUpgrade glib2-testsUpgrade glib2-doc | Nov 17, 2021 | Mar 4, 2021 |
| Redhat_linux | — | Upgrade glib2-docUpgrade glib2Upgrade glib2-debugsourceUpgrade glib2-develUpgrade glib2-staticUpgrade glib2-tests-debuginfoUpgrade glib2-fam-debuginfoUpgrade glib2-testsUpgrade glib2-devel-debuginfoUpgrade glib2-debuginfoNo solution existsUpgrade glib2-fam | Nov 10, 2021 | Nov 9, 2021 |
| Rocky_linux | — | Upgrade glib2-debugsourceUpgrade glib2-develUpgrade glib2-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2-famUpgrade glib2Upgrade glib2-fam-debuginfoUpgrade glib2-staticUpgrade glib2-devel-debuginfoUpgrade glib2-tests | Mar 12, 2024 | Aug 23, 2022 |
| Suse | — | Upgrade libgmodule-2_0-0-32bitUpgrade libgio-famUpgrade glib2-langUpgrade libglib-2_0-0-32bitUpgrade libgthread-2_0-0-32bitUpgrade glib2-devel-staticUpgrade glib2-toolsUpgrade libgthread-2_0-0Upgrade libgobject-2_0-0-32bitUpgrade libgmodule-2_0-0Upgrade libgio-2_0-0-32bitUpgrade libglib-2_0-0Upgrade libgobject-2_0-0Upgrade glib2-develUpgrade libgio-2_0-0 | Mar 17, 2022 | Nov 16, 2021 |
| Ubuntu | — | Upgrade libglib2.0-bin (Ubuntu Pro)Upgrade libglib2.0-0Upgrade libglib2.0-0 (Ubuntu Pro)Upgrade libglib2.0-devUpgrade libglib2.0-dataUpgrade libglib2.0-data (Ubuntu Pro)Upgrade libglib2.0-binUpgrade libglib2.0-dev (Ubuntu Pro) | Dec 15, 2021 | Nov 16, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub