Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-32665

Опубликовано: 14 сент. 2023
Источник: nvd
CVSS3: 5.5
EPSS Низкий

Описание

A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*
Версия до 2.74.4 (исключая)

EPSS

Процентиль: 17%
0.00055
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-400
CWE-502

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 2 лет назад

A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.

CVSS3: 6.5
redhat
почти 3 года назад

A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.

CVSS3: 5.5
msrc
около 1 месяца назад

Gvariant deserialisation does not match spec for non-normal data

CVSS3: 5.5
debian
около 2 лет назад

A flaw was found in GLib. GVariant deserialization is vulnerable to an ...

CVSS3: 5.5
github
около 2 лет назад

A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.

EPSS

Процентиль: 17%
0.00055
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-400
CWE-502
Уязвимость CVE-2023-32665