Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-79g9-vx8c-xfmq

Опубликовано: 14 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.

EPSS

Процентиль: 38%
0.00165
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-400
CWE-502

Связанные уязвимости

CVSS3: 4.7
ubuntu
около 2 лет назад

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.

CVSS3: 6.2
redhat
почти 3 года назад

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.

CVSS3: 4.7
nvd
около 2 лет назад

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.

CVSS3: 7.5
msrc
9 месяцев назад

Описание отсутствует

CVSS3: 4.7
debian
около 2 лет назад

A flaw was found in glib, where the gvariant deserialization code is v ...

EPSS

Процентиль: 38%
0.00165
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-400
CWE-502