A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw64-glib2Upgrade mingw64-glib2-staticUpgrade glib2-staticUpgrade mingw32-glib2Upgrade mingw32-glib2-staticUpgrade glib2-testsUpgrade glib2-develUpgrade glib2Upgrade glib2-doc | Nov 16, 2023 | Sep 14, 2023 |
| Alpine Linux | — | Upgrade glib | Mar 21, 2024 | Sep 14, 2023 |
| Amazon Linux Ami 2 | — | Upgrade glib2-famUpgrade glib2-testsUpgrade glib2Upgrade glib2-staticUpgrade glib2-docUpgrade glib2-develUpgrade glib2-debuginfo | Feb 26, 2025 | Sep 14, 2023 |
| Amazon_linux_2023 | — | Upgrade glib2-debuginfoUpgrade glib2Upgrade glib2-devel-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2-debugsourceUpgrade glib2-develUpgrade glib2-staticUpgrade glib2-docUpgrade glib2-tests | Feb 17, 2025 | Dec 14, 2022 |
| Azul Zulu | — | Upgrade Azul Zulu to the latest version | Apr 19, 2024 | Sep 14, 2023 |
| Centos_linux | — | Upgrade glib2Upgrade glib2-docUpgrade glib2-tests-debuginfoUpgrade glib2-debugsourceUpgrade glib2-devel-debuginfoUpgrade glib2-testsUpgrade glib2-debuginfoUpgrade glib2-devel | Nov 8, 2023 | Sep 14, 2023 |
| Debian | — | Upgrade glib2.0 | Sep 27, 2023 | Sep 14, 2023 |
| Gentoo Linux | — | Upgrade dev-libs/glib. | Nov 28, 2023 | Sep 14, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade glib2 | Aug 9, 2023 | Aug 8, 2023 |
| Oracle_linux | — | Upgrade glib2-docUpgrade mingw32-glib2-staticUpgrade mingw32-glib2Upgrade glib2-staticUpgrade glib2-develUpgrade mingw64-glib2-staticUpgrade glib2Upgrade mingw64-glib2Upgrade glib2-tests | May 7, 2024 | Dec 14, 2022 |
| Redhat_linux | — | Upgrade mingw32-glib2-debuginfoUpgrade mingw64-glib2-debuginfoUpgrade glib2-testsUpgrade glib2-debugsourceUpgrade glib2-devel-debuginfoUpgrade glib2-staticUpgrade glib2-develUpgrade glib2-docUpgrade glib2Upgrade glib2-tests-debuginfoUpgrade glib2-debuginfoNo solution existsUpgrade mingw64-glib2-staticUpgrade mingw32-glib2-staticUpgrade mingw64-glib2Upgrade mingw32-glib2 | Nov 8, 2023 | Sep 14, 2023 |
| Suse | — | Upgrade libgobject-2_0-0-32bitUpgrade libgmodule-2_0-0-32bitUpgrade libgthread-2_0-0Upgrade libgmodule-2_0-0Upgrade glib2-toolsUpgrade libgio-2_0-0-32bitUpgrade glib2-langUpgrade libgio-2_0-0Upgrade libglib-2_0-0-32bitUpgrade libgobject-2_0-0Upgrade libglib-2_0-0Upgrade glib2-devel | Sep 6, 2023 | Sep 5, 2023 |
| Ubuntu | — | Upgrade libglib2.0-0 (Ubuntu Pro)Upgrade libglib2.0-binUpgrade libglib2.0-0Upgrade libglib2.0-bin (Ubuntu Pro) | Jun 15, 2023 | Jun 14, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub