PT-2018-2887 · Gnome+3 · Glib+3
Publicado
2018-04-11
·
Atualizado
2019-07-31
·
CVE-2018-16428
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
GLib version 2.56.1
Description
The issue is related to the function
g markup parse context end parse() in the gmarkup.c file of the GLib library, which is associated with NULL pointer dereference errors. This could allow a remote attacker to cause a denial of service.Recommendations
For GLib version 2.56.1, consider disabling the
g markup parse context end parse() function as a temporary workaround until a patch is available. Restrict access to the gmarkup.c file to minimize the risk of exploitation. Avoid using the g markup parse context end parse() function in sensitive operations until the issue is resolved.Exploit
Correção
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Glib
Suse
Ubuntu