Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-79g9-vx8c-xfmq

Опубликовано: 14 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.

EPSS

Процентиль: 40%
0.00179
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-400
CWE-502

Связанные уязвимости

CVSS3: 4.7
ubuntu
почти 2 года назад

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.

CVSS3: 6.2
redhat
больше 2 лет назад

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.

CVSS3: 4.7
nvd
почти 2 года назад

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.

CVSS3: 7.5
msrc
4 месяца назад

Описание отсутствует

CVSS3: 4.7
debian
почти 2 года назад

A flaw was found in glib, where the gvariant deserialization code is v ...

EPSS

Процентиль: 40%
0.00179
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-400
CWE-502