Описание
A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS).
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 2.87.2-2 |
| esm-infra-legacy/trusty | needed | |
| esm-infra/bionic | needed | |
| esm-infra/focal | needed | |
| esm-infra/xenial | needed | |
| jammy | released | 2.72.4-0ubuntu2.8 |
| noble | released | 2.80.0-6ubuntu3.7 |
| questing | released | 2.86.0-2ubuntu0.2 |
| upstream | released | 2.87.1-1 |
Показывать по
EPSS
3.7 Low
CVSS3
Связанные уязвимости
A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS).
A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS).
A flaw was found in glib. Missing validation of offset and count param ...
EPSS
3.7 Low
CVSS3