Vulnerabilities (CVE)

Filtered by vendor Gnome Subscribe
Filtered by product Glib
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-9633 1 Gnome 1 Glib 2021-07-21 4.3 MEDIUM 6.5 MEDIUM
gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service (g_socket_client_connected_callback mishandling and application crash) via a crafted web site, as demonstrated by GNOME Web (aka Epiphany).
CVE-2018-16428 2 Canonical, Gnome 2 Ubuntu Linux, Glib 2019-07-31 7.5 HIGH 9.8 CRITICAL
In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.
CVE-2011-1709 1 Gnome 2 Gdm, Glib 2011-09-07 7.2 HIGH N/A
GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.