Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| GNOME | GLib | unaffected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 10 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 10 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 8 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 8 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | affected |
|
||||||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | affected |
|
||||||
| Red Hat | Red Hat Discovery 2 | affected |
|
||||||
| Red Hat | Red Hat Discovery 2 | affected |
|
||||||
| Red Hat | Red Hat Insights proxy 1.5 | affected |
|
||||||
| Red Hat | Red Hat OpenShift AI 3.0 | affected |
|
||||||
| Red Hat | Red Hat OpenShift AI 3.0 | affected |
|
||||||
| Red Hat | Red Hat OpenShift AI 3.0 | affected |
|
||||||
| Red Hat | Red Hat OpenShift AI 3.0 | affected |
|
||||||
| Red Hat | Red Hat OpenShift AI 3.0 | affected |
|
||||||
| Red Hat | Red Hat OpenShift AI 3.2 | affected |
|
||||||
| Red Hat | Red Hat OpenShift AI 3.2 | affected |
|
||||||
| Red Hat | Red Hat OpenShift AI 3.2 | affected |
|
||||||
| Red Hat | Red Hat OpenShift AI 3.2 | affected |
|
||||||
| Red Hat | Red Hat OpenShift AI 3.2 | affected |
|
||||||
| Red Hat | Red Hat OpenShift AI 3.2 | affected |
|
||||||
| Red Hat | Red Hat OpenShift AI 3.4 | affected |
|
||||||
| Red Hat | Red Hat Update Infrastructure 5 | affected |
|
||||||
| Red Hat | Red Hat Update Infrastructure 5 | affected |
|
||||||
| Red Hat | Red Hat Update Infrastructure 5 | affected |
|
||||||
| Red Hat | Red Hat Update Infrastructure 5 | affected |
|
||||||
| Red Hat | Red Hat Update Infrastructure 5 | affected |
|
||||||
| Red Hat | Red Hat Update Infrastructure 5 | affected |
|
||||||
| Red Hat | Red Hat Update Infrastructure 5 | affected |
|
||||||
| Red Hat | Red Hat Update Infrastructure 5 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 6 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected | — | ||||||
| Red Hat | Red Hat Hardened Images | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — |
Configuration 1 [-]
|
Configuration 2 [-]
|
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Gnome | Glib |
|
||||||||
| Redhat | Enterprise Linux |
|
||||||||
| Redhat | Hardened Images |
|
Vendor Workaround
To mitigate this vulnerability, implement input validation to sanitize untrusted D-Bus introspection XML, specifically rejecting malformed structures such as <node> elements improperly nested within <method>, <signal>, <property> or <arg> elements before calling g_dbus_node_info_new_for_xml(). Alternatively, restricting the application to only process XML input from trusted, authenticated sources will completely neutralize this issue.
| Source | ID | Title |
|---|---|---|
Ubuntu USN |
USN-8794-1 | GLib vulnerabilities |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.560% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/o:redhat:enterprise_linux:10.3 | |
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:openshift_ai |
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:9 |
cpe:/a:redhat:enterprise_linux:10 cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:rhel_els:6 |
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat cert-manager Operator
Redhat codeready Linux Builder Redhat codeready Linux Builder Eus Redhat enterprise Linux Aus Redhat enterprise Linux Els Redhat enterprise Linux Server Tus Redhat enterprise Linux Update Services For Sap Solutions Redhat insights-proxy Redhat update Infrastructure |
|
| CPEs | cpe:2.3:a:redhat:cert-manager_operator:*:*:*:*:*:openshift:*:* cpe:2.3:a:redhat:cert-manager_operator:1.17.0:*:*:*:*:openshift:*:* cpe:2.3:a:redhat:cert-manager_operator:1.20.0:*:*:*:*:openshift:*:* cpe:2.3:a:redhat:codeready_linux_builder:10.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_eus:10.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_eus:9.6:*:*:*:*:*:*:* cpe:2.3:a:redhat:discovery:2.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:insights-proxy:1.5.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:update_infrastructure:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_els:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.4:*:*:*:*:*:*:* |
|
| Vendors & Products |
Redhat cert-manager Operator
Redhat codeready Linux Builder Redhat codeready Linux Builder Eus Redhat enterprise Linux Aus Redhat enterprise Linux Els Redhat enterprise Linux Server Tus Redhat enterprise Linux Update Services For Sap Solutions Redhat insights-proxy Redhat update Infrastructure |
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:cert_manager:1.17::el9 cpe:/a:redhat:cert_manager:1.18::el9 |
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:openshift_ai:3.4::el9 | |
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:openshift_ai:3.2::el9 | |
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat openshift Ai
|
|
| CPEs | cpe:/a:redhat:openshift_ai:3.0::el9 | |
| Vendors & Products |
Redhat openshift Ai
|
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat cert Manager
|
|
| CPEs | cpe:/a:redhat:cert_manager:1.20::el9 | |
| Vendors & Products |
Redhat cert Manager
|
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat insights Proxy
|
|
| CPEs | cpe:/a:redhat:insights_proxy:1.5::el9 | |
| Vendors & Products |
Redhat insights Proxy
|
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat enterprise Linux Eus
Redhat rhel Els Redhat rhel Eus |
|
| CPEs | cpe:/a:redhat:rhel_eus:9.6::appstream cpe:/a:redhat:rhel_eus:9.6::crb cpe:/o:redhat:enterprise_linux_eus:10.0 cpe:/o:redhat:rhel_els:7 cpe:/o:redhat:rhel_eus:9.6::baseos |
|
| Vendors & Products |
Redhat enterprise Linux Eus
Redhat rhel Els Redhat rhel Eus |
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat rhel Aus
Redhat rhel E4s Redhat rhel Eus Long Life Redhat rhel Tus |
|
| CPEs | cpe:/a:redhat:rhel_e4s:9.2::appstream cpe:/a:redhat:rhel_e4s:9.4::appstream cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/o:redhat:rhel_e4s:9.2::baseos cpe:/o:redhat:rhel_e4s:9.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.6::baseos cpe:/o:redhat:rhel_tus:8.8::baseos |
|
| Vendors & Products |
Redhat rhel Aus
Redhat rhel E4s Redhat rhel Eus Long Life Redhat rhel Tus |
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | ||
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a <node> element nested within other elements like <method>, <signal>, <property> or <arg>. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service. | A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service. |
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat discovery
|
|
| CPEs | cpe:/a:redhat:discovery:2::el9 | |
| Vendors & Products |
Redhat discovery
|
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat rhui
|
|
| CPEs | cpe:/a:redhat:rhui:5::el9 | |
| Vendors & Products |
Redhat rhui
|
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb cpe:/o:redhat:enterprise_linux:9::baseos |
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/o:redhat:enterprise_linux:10.2 | |
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:enterprise_linux:8::crb cpe:/o:redhat:enterprise_linux:8::baseos |
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Gnome
Gnome glib Redhat hardened Images |
|
| Vendors & Products |
Gnome
Gnome glib Redhat hardened Images |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a <node> element nested within other elements like <method>, <signal>, <property> or <arg>. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service. | |
| Title | Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" | |
| First Time appeared |
Redhat
Redhat enterprise Linux Redhat hummingbird |
|
| Weaknesses | CWE-191 | |
| CPEs | cpe:/a:redhat:hummingbird:1 cpe:/o:redhat:enterprise_linux:10 cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9 |
|
| Vendors & Products |
Redhat
Redhat enterprise Linux Redhat hummingbird |
|
| References |
| |
| Metrics |
cvssV3_1
|