Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2023-32636

Good to know:

icon

Date: September 14, 2023

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.

Language: C

Severity Score

Related Resources (7)

https://https://discourse.gnome.org/t/multiple-fixes-for-gvariant-normalisation-issues-in-glib/12835
https://bugzilla.redhat.com/show_bug.cgi?id=2211833
https://security.netapp.com/advisory/ntap-20231110-0002/
https://access.redhat.com/security/cve/CVE-2023-32636
https://nvd.nist.gov/vuln/detail/CVE-2023-32636
https://gitlab.gnome.org/GNOME/glib/-/issues/2841
https://www.mend.io/vulnerability-database/CVE-2023-32636

Severity Score

Weakness Type (CWE)

Deserialization of Untrusted Data

CWE-502

Uncontrolled Resource Consumption ('Resource Exhaustion')

CWE-400

Top Fix

icon

Upgrade Version

Upgrade to version 2.75.1

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): HIGH
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

Do you need more information?

Contact Us