Описание
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| glib2.0 | fixed | 2.88.1-2 | package | |
| glib2.0 | fixed | 2.84.4-3~deb13u4 | trixie | package |
| glib2.0 | postponed | bookworm | package | |
| glib2.0 | postponed | bullseye | package |
Примечания
https://gitlab.gnome.org/GNOME/glib/-/work_items/3930
https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5171 (2.89.0)
https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5174 (2.88.1)
EPSS
Связанные уязвимости
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
EPSS