CVE-2023-29499

Опубликовано: 14 сент. 2023

Источник: nvd

CVSS3: 5.5

CVSS3: 7.5

EPSS Низкий

Описание

A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.

Ссылки

https://access.redhat.com/security/cve/CVE-2023-29499
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2211828
Issue Tracking
Third Party Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/2794
Issue Tracking
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/09/msg00030.html
https://security.gentoo.org/glsa/202311-18
https://security.netapp.com/advisory/ntap-20231103-0001/
https://access.redhat.com/security/cve/CVE-2023-29499
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2211828
Issue Tracking
Third Party Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/2794
Issue Tracking
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/09/msg00030.html
https://security.gentoo.org/glsa/202311-18
https://security.netapp.com/advisory/ntap-20231103-0001/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*

Версия до 2.74.4 (исключая)

EPSS

Процентиль: 32%

0.0012

Низкий

5.5 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVE-2023-29499

CVSS3: 5.5

ubuntu

почти 2 года назад

A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.

CVE-2023-29499

CVSS3: 6.2

redhat

больше 2 лет назад

A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.

CVE-2023-29499

CVSS3: 7.5

msrc

4 месяца назад

Описание отсутствует

CVE-2023-29499

CVSS3: 5.5

debian

почти 2 года назад

A flaw was found in GLib. GVariant deserialization fails to validate t ...

GHSA-794g-pjcw-ggfp

CVSS3: 5.5

github

почти 2 года назад

A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.

EPSS

Процентиль: 32%

0.0012

Низкий

5.5 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-400