PT-2023-9105 · Glib+4 · Glib+4

Publicado 2023-06-07 · Atualizado 2025-02-26 · CVE-2023-32643

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Glib (affected versions not specified)

Description The issue is related to a buffer overflow in dynamic memory, which could allow an attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Heap Based Buffer Overflow

Memory Corruption

Enumeração de Fraquezas

CWE-122

CWE-787

Identificadores relacionados

AZL-28777

BDU:2024-03777

CVE-2023-32643

ROSA-SA-2025-2598

SUSE-SU-2023:3535-1

USN-6165-1

USN-6165-2

Produtos afetados

Glib

Linuxmint

Red Os

Suse

Ubuntu

Referências · 43

• https://abf.rosa.ru/advisories/ROSA-SA-2025-2598 · Nota
• https://suse.com/security/cve/CVE-2021-28153 · Nota
• https://bugzilla.suse.com/1211951 · Nota
• https://suse.com/security/cve/CVE-2023-32611 · Nota
• https://ubuntu.com/security/CVE-2023-32636 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-6165-1 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2023/suse-su-20233535-1 · Nota
• https://bugzilla.suse.com/1183533 · Nota
• https://t.me/cibsecurity/70561 · Publicação no Telegram
• https://bugzilla.suse.com/1211945 · Nota
• https://t.me/cvenotify/78118 · Publicação no Telegram
• https://redos.red-soft.ru/support/secure · Nota
• https://bugzilla.suse.com/1211946 · Nota
• https://suse.com/security/cve/CVE-2023-32665 · Nota
• https://twitter.com/LambdaWatchdog/status/1894719257365111272 · Publicação no Twitter