A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-glib2-docalma-upgrade-glib2-static | May 4, 2022 | Nov 9, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-glib2amazon-linux-ami-2-upgrade-glib2-debuginfoamazon-linux-ami-2-upgrade-glib2-develamazon-linux-ami-2-upgrade-glib2-docamazon-linux-ami-2-upgrade-glib2-famamazon-linux-ami-2-upgrade-glib2-staticamazon-linux-ami-2-upgrade-glib2-tests | Jun 6, 2023 | Aug 23, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-glib2 | May 4, 2023 | Nov 16, 2021 |
| Centos_linux | — | centos-upgrade-glib2centos-upgrade-glib2-debuginfocentos-upgrade-glib2-debugsourcecentos-upgrade-glib2-develcentos-upgrade-glib2-devel-debuginfocentos-upgrade-glib2-famcentos-upgrade-glib2-fam-debuginfocentos-upgrade-glib2-testscentos-upgrade-glib2-tests-debuginfo | Nov 10, 2021 | Nov 9, 2021 |
| Debian | debian-upgrade-glib2-0 | Sep 19, 2022 | Aug 23, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-glib2huawei-euleros-2_0_sp5-upgrade-glib2-devel | Mar 9, 2023 | Aug 23, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-glib2huawei-euleros-2_0_sp8-upgrade-glib2-develhuawei-euleros-2_0_sp8-upgrade-glib2-fam | Feb 9, 2023 | Aug 23, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-glib2oracle-linux-upgrade-glib2-develoracle-linux-upgrade-glib2-docoracle-linux-upgrade-glib2-famoracle-linux-upgrade-glib2-staticoracle-linux-upgrade-glib2-tests | Nov 17, 2021 | Mar 4, 2021 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-glib2redhat-upgrade-glib2-debuginforedhat-upgrade-glib2-debugsourceredhat-upgrade-glib2-develredhat-upgrade-glib2-devel-debuginforedhat-upgrade-glib2-docredhat-upgrade-glib2-famredhat-upgrade-glib2-fam-debuginforedhat-upgrade-glib2-staticredhat-upgrade-glib2-testsredhat-upgrade-glib2-tests-debuginfo | Nov 10, 2021 | Nov 9, 2021 | |
| Rocky_linux | rocky-upgrade-glib2rocky-upgrade-glib2-debuginforocky-upgrade-glib2-debugsourcerocky-upgrade-glib2-develrocky-upgrade-glib2-devel-debuginforocky-upgrade-glib2-famrocky-upgrade-glib2-fam-debuginforocky-upgrade-glib2-staticrocky-upgrade-glib2-testsrocky-upgrade-glib2-tests-debuginfo | Mar 12, 2024 | Aug 23, 2022 | |
| Suse | — | suse-upgrade-glib2-develsuse-upgrade-glib2-devel-staticsuse-upgrade-glib2-langsuse-upgrade-glib2-toolssuse-upgrade-libgio-2_0-0suse-upgrade-libgio-2_0-0-32bitsuse-upgrade-libgio-famsuse-upgrade-libglib-2_0-0suse-upgrade-libglib-2_0-0-32bitsuse-upgrade-libgmodule-2_0-0suse-upgrade-libgmodule-2_0-0-32bitsuse-upgrade-libgobject-2_0-0suse-upgrade-libgobject-2_0-0-32bitsuse-upgrade-libgthread-2_0-0suse-upgrade-libgthread-2_0-0-32bit | Mar 17, 2022 | Nov 16, 2021 |
| Ubuntu | ubuntu-pro-upgrade-libglib2-0-0ubuntu-pro-upgrade-libglib2-0-binubuntu-pro-upgrade-libglib2-0-dataubuntu-pro-upgrade-libglib2-0-devubuntu-upgrade-libglib2-0-0ubuntu-upgrade-libglib2-0-binubuntu-upgrade-libglib2-0-dataubuntu-upgrade-libglib2-0-dev | Dec 15, 2021 | Nov 16, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Aug 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub