gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glib2Upgrade glib2-famUpgrade glib2-testsUpgrade glib2-staticUpgrade glib2-develUpgrade glib2-docUpgrade mingw64-glib2Upgrade mingw32-glib2-staticUpgrade mingw64-glib2-staticUpgrade mingw32-glib2 | Feb 10, 2025 | Nov 11, 2024 |
| Debian | — | Upgrade glib2.0 | Dec 2, 2024 | Nov 11, 2024 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Sep 23, 2025 | Apr 8, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade glib2 | Mar 18, 2025 | Nov 11, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade glib2 | Feb 11, 2025 | Nov 11, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade glib2 | Feb 11, 2025 | Nov 11, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade glib2 | Mar 18, 2025 | Nov 11, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade mingw64-glib2Upgrade mingw32-glib2Upgrade mingw64-glib2-staticUpgrade glib2-testsUpgrade glib2-staticUpgrade glib2-famUpgrade mingw32-glib2-staticUpgrade glib2Upgrade glib2-docUpgrade glib2-devel | Feb 19, 2025 | Nov 11, 2024 |
| Redhat_linux | — | Upgrade glib2Upgrade mingw64-glib2-staticUpgrade mingw32-glib2Upgrade mingw32-glib2-staticUpgrade glib2-devel-debuginfoUpgrade glib2-docUpgrade glib2-develUpgrade glib2-debuginfoUpgrade glib2-staticUpgrade glib2-debugsourceUpgrade glib2-famUpgrade mingw64-glib2Upgrade glib2-fam-debuginfoNo solution existsUpgrade glib2-tests-debuginfoUpgrade glib2-testsUpgrade mingw32-glib2-debuginfoUpgrade mingw64-glib2-debuginfo | Feb 5, 2025 | Nov 11, 2024 |
| Rocky_linux | — | Upgrade glib2Upgrade glib2-fam-debuginfoUpgrade glib2-famUpgrade glib2-devel-debuginfoUpgrade glib2-debuginfoUpgrade glib2-staticUpgrade glib2-develUpgrade glib2-tests-debuginfoUpgrade glib2-debugsourceUpgrade glib2-docUpgrade glib2-tests | Feb 5, 2026 | Jul 29, 2025 |
| Ubuntu | — | Upgrade libglib2.0-0 (Ubuntu Pro)Upgrade libglib2.0-bin (Ubuntu Pro)Upgrade libglib2.0-0Upgrade libglib2.0-binUpgrade libglib2.0-0t64 | Nov 19, 2024 | Nov 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 11, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub