PT-2024-10825 · Gnome+1 · Gnome Glade+1

Published 2024-02-18 · Updated 2025-05-07 · CVE-2020-36774

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNOME Glade versions 3.38.0 through 3.38.1 GNOME Glade versions 3.39.x through 3.39.x before 3.40.0

Description The issue is related to the mishandling of widget rebuilding for GladeGtkBox in the glade-gtk-box.c file, leading to a denial of service (application crash).

Recommendations For GNOME Glade versions 3.38.0 through 3.38.1, update to version 3.38.1 or later. For GNOME Glade versions 3.39.x before 3.40.0, update to version 3.40.0 or later.

Fix

DoS

Weakness Enumeration

CWE-664

Related Identifiers

CVE-2020-36774

OESA-2024-1270

OESA-2024-1309

OPENSUSE-SU-2024:13737-1

SUSE-SU-2024:0983-1

SUSE-SU-2024_0983-1

Affected Products

Gnome Glade

Suse

References · 21

• https://nvd.nist.gov/vuln/detail/CVE-2020-36774 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-36774 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1309 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-36774 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1270 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0983-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-36774 · Security Note
• https://ubuntu.com/security/CVE-2020-36774 · Vendor Advisory
• https://gitlab.gnome.org/GNOME/glade/-/commit/7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17 · Patch
• https://osv.dev/vulnerability/CVE-2020-36774 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-36774 · Vendor Advisory
• https://suse.com/security/cve/CVE-2020-36774 · Note
• https://bugzilla.suse.com/1220059 · Note
• https://t.me/cvenotify/121179 · Telegram Post
• https://suse.com/support/update/announcement/2024/suse-su-20240983-1 · Note