A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw32-glib2-staticUpgrade glib2-develUpgrade mingw64-glib2-staticUpgrade mingw32-glib2Upgrade glib2-testsUpgrade glib2-docUpgrade glib2Upgrade glib2-staticUpgrade mingw64-glib2 | Nov 16, 2023 | Sep 14, 2023 |
| Alpine Linux | — | Upgrade glib | Mar 21, 2024 | Sep 14, 2023 |
| Amazon Linux Ami 2 | — | Upgrade glib2Upgrade glib2-develUpgrade glib2-testsUpgrade glib2-staticUpgrade glib2-famUpgrade glib2-docUpgrade glib2-debuginfo | Feb 26, 2025 | Sep 14, 2023 |
| Amazon_linux_2023 | — | Upgrade glib2-docUpgrade glib2-tests-debuginfoUpgrade glib2Upgrade glib2-develUpgrade glib2-staticUpgrade glib2-debuginfoUpgrade glib2-devel-debuginfoUpgrade glib2-debugsourceUpgrade glib2-tests | Feb 17, 2025 | Dec 14, 2022 |
| Azul Zulu | — | Upgrade Azul Zulu to the latest version | Apr 19, 2024 | Sep 14, 2023 |
| Centos_linux | — | Upgrade glib2-develUpgrade glib2-debugsourceUpgrade glib2-devel-debuginfoUpgrade glib2-debuginfoUpgrade glib2Upgrade glib2-tests-debuginfoUpgrade glib2-testsUpgrade glib2-doc | Nov 8, 2023 | Sep 14, 2023 |
| Debian | — | Upgrade glib2.0 | Sep 27, 2023 | Sep 14, 2023 |
| Gentoo Linux | — | Upgrade dev-libs/glib. | Nov 28, 2023 | Sep 14, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade glib2 | Aug 9, 2023 | Aug 8, 2023 |
| Oracle_linux | — | Upgrade glib2Upgrade glib2-docUpgrade glib2-develUpgrade glib2-testsUpgrade mingw64-glib2Upgrade glib2-staticUpgrade mingw64-glib2-staticUpgrade mingw32-glib2-staticUpgrade mingw32-glib2 | May 7, 2024 | Dec 14, 2022 |
| Redhat_linux | — | Upgrade mingw32-glib2Upgrade glib2-debugsourceUpgrade glib2-devel-debuginfoUpgrade glib2-docUpgrade glib2-develUpgrade glib2-staticUpgrade glib2-tests-debuginfoUpgrade mingw64-glib2-debuginfoUpgrade glib2-debuginfoUpgrade mingw64-glib2-staticNo solution existsUpgrade glib2-testsUpgrade mingw32-glib2-debuginfoUpgrade mingw64-glib2Upgrade mingw32-glib2-staticUpgrade glib2 | Nov 8, 2023 | Sep 14, 2023 |
| Suse | — | Upgrade glib2-langUpgrade glib2-develUpgrade libgobject-2_0-0Upgrade libgobject-2_0-0-32bitUpgrade libgmodule-2_0-0Upgrade libglib-2_0-0Upgrade glib2-toolsUpgrade libgio-2_0-0-32bitUpgrade libgmodule-2_0-0-32bitUpgrade libgio-2_0-0Upgrade libgthread-2_0-0Upgrade libglib-2_0-0-32bit | Sep 6, 2023 | Sep 5, 2023 |
| Ubuntu | — | Upgrade libglib2.0-binUpgrade libglib2.0-bin (Ubuntu Pro)Upgrade libglib2.0-0Upgrade libglib2.0-0 (Ubuntu Pro) | Jun 15, 2023 | Jun 14, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub