A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-glib2alma-upgrade-glib2-develalma-upgrade-glib2-docalma-upgrade-glib2-staticalma-upgrade-glib2-testsalma-upgrade-mingw32-glib2alma-upgrade-mingw32-glib2-staticalma-upgrade-mingw64-glib2alma-upgrade-mingw64-glib2-static | Nov 16, 2023 | Sep 14, 2023 | |
| Alpine Linux | alpine-linux-upgrade-glib | Mar 21, 2024 | Sep 14, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-glib2amazon-linux-ami-2-upgrade-glib2-debuginfoamazon-linux-ami-2-upgrade-glib2-develamazon-linux-ami-2-upgrade-glib2-docamazon-linux-ami-2-upgrade-glib2-famamazon-linux-ami-2-upgrade-glib2-staticamazon-linux-ami-2-upgrade-glib2-tests | Feb 26, 2025 | Sep 14, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-glib2amazon-linux-2023-upgrade-glib2-debuginfoamazon-linux-2023-upgrade-glib2-debugsourceamazon-linux-2023-upgrade-glib2-develamazon-linux-2023-upgrade-glib2-devel-debuginfoamazon-linux-2023-upgrade-glib2-docamazon-linux-2023-upgrade-glib2-staticamazon-linux-2023-upgrade-glib2-testsamazon-linux-2023-upgrade-glib2-tests-debuginfo | Feb 17, 2025 | Dec 14, 2022 | |
| Azul Zulu | azul-zulu-upgrade-latest | Apr 19, 2024 | Sep 14, 2023 | |
| Centos_linux | — | centos-upgrade-glib2centos-upgrade-glib2-debuginfocentos-upgrade-glib2-debugsourcecentos-upgrade-glib2-develcentos-upgrade-glib2-devel-debuginfocentos-upgrade-glib2-doccentos-upgrade-glib2-testscentos-upgrade-glib2-tests-debuginfo | Nov 8, 2023 | Sep 14, 2023 |
| Debian | debian-upgrade-glib2-0 | Sep 27, 2023 | Sep 14, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-glib | Nov 28, 2023 | Sep 14, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-glib2 | Aug 9, 2023 | Aug 8, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-glib2oracle-linux-upgrade-glib2-develoracle-linux-upgrade-glib2-docoracle-linux-upgrade-glib2-staticoracle-linux-upgrade-glib2-testsoracle-linux-upgrade-mingw32-glib2oracle-linux-upgrade-mingw32-glib2-staticoracle-linux-upgrade-mingw64-glib2oracle-linux-upgrade-mingw64-glib2-static | May 7, 2024 | Dec 14, 2022 |
| Redhat_linux | redhat-upgrade-glib2redhat-upgrade-glib2-debuginforedhat-upgrade-glib2-debugsourceredhat-upgrade-glib2-develredhat-upgrade-glib2-devel-debuginforedhat-upgrade-glib2-docredhat-upgrade-glib2-staticredhat-upgrade-glib2-testsredhat-upgrade-glib2-tests-debuginforedhat-upgrade-mingw32-glib2redhat-upgrade-mingw32-glib2-debuginforedhat-upgrade-mingw32-glib2-staticredhat-upgrade-mingw64-glib2redhat-upgrade-mingw64-glib2-debuginforedhat-upgrade-mingw64-glib2-static | Nov 8, 2023 | Sep 14, 2023 | |
| Suse | — | suse-upgrade-glib2-develsuse-upgrade-glib2-langsuse-upgrade-glib2-toolssuse-upgrade-libgio-2_0-0suse-upgrade-libgio-2_0-0-32bitsuse-upgrade-libglib-2_0-0suse-upgrade-libglib-2_0-0-32bitsuse-upgrade-libgmodule-2_0-0suse-upgrade-libgmodule-2_0-0-32bitsuse-upgrade-libgobject-2_0-0suse-upgrade-libgobject-2_0-0-32bitsuse-upgrade-libgthread-2_0-0 | Sep 6, 2023 | Sep 5, 2023 |
| Ubuntu | ubuntu-pro-upgrade-libglib2-0-0ubuntu-pro-upgrade-libglib2-0-binubuntu-upgrade-libglib2-0-0ubuntu-upgrade-libglib2-0-bin | Jun 15, 2023 | Jun 14, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Sep 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub