A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table vali…
中危 CVSS 4.7
摘要
A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://gitlab.gnome.org/GNOME/glib/-/issues/2841 Issue Tracking
- https://https://discourse.gnome.org/t/multiple-fixes-for-gvariant-normalisation-issues-in-glib/12835 Broken Link
- https://security.netapp.com/advisory/ntap-20231110-0002/ Third Party Advisory
- https://gitlab.gnome.org/GNOME/glib/-/issues/2841 Issue Tracking
- https://https://discourse.gnome.org/t/multiple-fixes-for-gvariant-normalisation-issues-in-glib/12835 Broken Link
- https://security.netapp.com/advisory/ntap-20231110-0002/ Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
时间线
- nvd_ingest NVD