Описание
glib-networking's OpenSSL backend fails to properly check the return value of a call to BIO_write(), resulting in an out of bounds read.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| glib-networking | unfixed | package |
Примечания
https://gitlab.gnome.org/GNOME/glib-networking/-/issues/226
https://gitlab.gnome.org/GNOME/glib-networking/-/merge_requests/262
Fixed by: https://gitlab.gnome.org/GNOME/glib-networking/-/commit/4dd540505d40babe488404f3174ec39f49a84485
OpenSSL backend disabled by default upstream and in Debian
EPSS
Связанные уязвимости
glib-networking's OpenSSL backend fails to properly check the return value of a call to BIO_write(), resulting in an out of bounds read.
glib-networking's OpenSSL backend fails to properly check the return value of a call to BIO_write(), resulting in an out of bounds read.
Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"
glib-networking's OpenSSL backend fails to properly check the return value of a call to BIO_write(), resulting in an out of bounds read.
Уязвимость функции BIO_write() библиотеки OpenSSL, позволяющая нарушителю вызвать отказ в обслуживании
EPSS