A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw64-glib2-staticUpgrade mingw64-glib2Upgrade glib2-staticUpgrade glib2-testsUpgrade mingw32-glib2-staticUpgrade glib2-develUpgrade mingw32-glib2Upgrade glib2-docUpgrade glib2 | Nov 16, 2023 | Sep 14, 2023 |
| Alpine Linux | — | Upgrade glib | Mar 21, 2024 | Sep 14, 2023 |
| Amazon Linux Ami 2 | — | Upgrade glib2Upgrade glib2-testsUpgrade glib2-famUpgrade glib2-staticUpgrade glib2-docUpgrade glib2-debuginfoUpgrade glib2-devel | Feb 26, 2025 | Sep 14, 2023 |
| Amazon_linux_2023 | — | Upgrade glib2-testsUpgrade glib2-docUpgrade glib2-devel-debuginfoUpgrade glib2-staticUpgrade glib2-debuginfoUpgrade glib2Upgrade glib2-debugsourceUpgrade glib2-develUpgrade glib2-tests-debuginfo | Feb 17, 2025 | Dec 14, 2022 |
| Azul Zulu | — | Upgrade Azul Zulu to the latest version | Apr 19, 2024 | Sep 14, 2023 |
| Centos_linux | — | Upgrade glib2Upgrade glib2-docUpgrade glib2-tests-debuginfoUpgrade glib2-testsUpgrade glib2-devel-debuginfoUpgrade glib2-develUpgrade glib2-debuginfoUpgrade glib2-debugsource | Nov 8, 2023 | Sep 14, 2023 |
| Debian | — | Upgrade glib2.0 | Sep 27, 2023 | Sep 14, 2023 |
| Gentoo Linux | — | Upgrade dev-libs/glib. | Nov 28, 2023 | Sep 14, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade glib2 | Aug 9, 2023 | Aug 8, 2023 |
| Oracle_linux | — | Upgrade glib2-testsUpgrade mingw64-glib2-staticUpgrade glib2Upgrade mingw64-glib2Upgrade glib2-staticUpgrade mingw32-glib2-staticUpgrade glib2-docUpgrade glib2-develUpgrade mingw32-glib2 | May 7, 2024 | Dec 14, 2022 |
| Redhat_linux | — | Upgrade glib2-testsUpgrade glib2-tests-debuginfoUpgrade glib2Upgrade glib2-develUpgrade glib2-docUpgrade glib2-devel-debuginfoUpgrade mingw32-glib2-debuginfoUpgrade glib2-debugsourceUpgrade glib2-staticUpgrade mingw64-glib2-debuginfoUpgrade glib2-debuginfoUpgrade mingw64-glib2Upgrade mingw32-glib2No solution existsUpgrade mingw32-glib2-staticUpgrade mingw64-glib2-static | Nov 8, 2023 | Sep 14, 2023 |
| Suse | — | Upgrade glib2-langUpgrade libgobject-2_0-0Upgrade glib2-develUpgrade libglib-2_0-0-32bitUpgrade libgio-2_0-0Upgrade libglib-2_0-0Upgrade libgthread-2_0-0Upgrade libgobject-2_0-0-32bitUpgrade glib2-toolsUpgrade libgmodule-2_0-0-32bitUpgrade libgmodule-2_0-0Upgrade libgio-2_0-0-32bit | Sep 6, 2023 | Sep 5, 2023 |
| Ubuntu | — | Upgrade libglib2.0-binUpgrade libglib2.0-0 (Ubuntu Pro)Upgrade libglib2.0-bin (Ubuntu Pro)Upgrade libglib2.0-0 | Jun 15, 2023 | Jun 14, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub